Jobs in the United States

25+ jobs

Group jobs by employerEmail me new jobs Save this search

Added 21 mins ago
Engineering Manager
Dispel
Remote, United States
Run effective team rituals (sprint planning, retrospectives, standups, reviews) calibrated to what your teams actually need, not a fixed process template.
Added 31 mins ago
Forward Deployed Engineer, GenAI, Youtube Go-To-Market Technology and Insights
YouTube
San Bruno, CA · Mountain View, CA · New York, NY
…explore what they love, and connect with one another in the process. Working at the intersection of cutting-edge technology and boundless creativity, we move at the speed of culture with a…
Added 55 mins ago
Quality Engineer I
ASTEMO INDIANA, INC.
Greenfield, IN
The Quality Engineer will work closely with a wide range of internal stakeholders, including Process Engineers, Test Engineers, Analysis Engineers, Design Engineers, Supplier Quality…
Added 1 hour ago
Advanced AI Full Stack Engineer
Accenture LLP Company
NY
Engineer multi-tier memory architectures spanning in-process working memory, cross-session relational stores, vector databases for semantic retrieval, and version-controlled procedural…
Added 1 hour ago
Lead Technical Marketing Engineer, Network Platform APIs, Enterprise Integrations & Agentic Automation(Remote)
Cisco Systems, Inc.
Remote, United States
…compensation for the role in your location during the hiring…
Added 1 hour ago
Process Integration Engineer
Micron Idaho Semiconductor Manufacturing (Triton) LLC
Boise, ID
Work with a team of other process and equipment engineers responsible for starting up, developing and optimizing processes to improve product quality and reliability, working on process…
Added 2 hours ago
Engineering Intern Operational Readiness
South32 Group Operations Pty. Ltd.
Patagonia, AZ
Actively enrolled in second year or higher in Undergraduate or Graduate degree program of a Mechanical Engineer or Mining Engineering Program.
Added 2 hours ago
Manufacturing Engineer Technician
Trexon
Chandler, AZ
Qualastat Electronics, a Trexon company, seeks a dedicated Senior Manufacturing Engineer Technician for its Chandler, AZ location. This role offers opportunities for professional growth,…
Added 2 hours ago
Senior Product Quality Engineer, Google Cloud
Google
Sunnyvale, CA
4 years of experience with PCBA manufacturing process and server/rack assembly.
Added 2 hours ago
Network Engineer Principal
GD Information Technology, Inc.
United States
The Network Engineer Principal must have:
Added 2 hours ago
Systems Engineer 4
Lam Research
Fremont
‘Virtual Flex’ you’ll work 1-2 days per week on-site at a Lam or customer/supplier location, and remotely the rest of the time
Added 2 hours ago
Power Electronics Drone Propulsion Engineer, Prime Air
Amazon.com Services LLC
Seattle, WA
We are seeking a Power Electronics Engineer to join our team. In this role, you will be a significant and autonomous contributor, solving difficult hardware engineering problems related to…
Added 2 hours ago
J
Senior Software Engineer, Production
Jobgether
Remote, United States
- $192,000 to $230,000 USD / year
Location requirement: Candidates must be based in the United States or the European Union due to customer jurisdiction and operational requirements
Added 2 hours ago
Full-Stack Engineer 4 (Java, Spring Boot, AWS) (Enterprise Platforms Technology)
Capital One
Plano, TX
Plano, TX: $179,400 - $204,700 for Full-stack Engineer 4
Added 2 hours ago
Full-Stack Engineer 4 (Java, Python, Cloud) (Enterprise Platforms Technology)
Capital One
McLean, VA
McLean, VA: $197,300 - $225,100 for Full-stack Engineer 4
Added 3 hours ago
D
Growth Engineer
Dust
New York, NY
- $100,000 to $200,000 USD / year
- Software engineer first. Strong engineering fundamentals, ideally full-stack (TypeScript/React + backend). You write clean, production-grade code.
Added 3 hours ago
Drone Battery Pack Design Engineer II, Prime Air
Amazon.com Services LLC
Seattle, WA
We are seeking a Drone Battery Pack Design Engineer II to join our Electric Propulsion Subsystem (EPS) team. In this role, you will be a significant and autonomous contributor, solving…
Added 3 hours ago
E
Head of Product Marketing
Exa
San Francisco, CA
- $260,000 to $315,000 USD / year
…this role should bring market feedback into the prioritization process. You will be the person to surface valuable features and evaluate competitive positioning, with the ultimate aim of…
Added 3 hours ago
Quality Engineer
Promega
Madison, WI
YOUR ROLE: As a Quality Engineer, you'll lead quality system improvement projects for Promega's medical device business, work governed by ISO 13485 and FDA's Quality Management System…
Added 4 hours ago
Manufacturing Engineer III – 2nd Shift - New Glenn
Blue Origin Personnel, LLC
Space Coast, FL
Writing clear shift handoffs and coordinating with day shift engineering, quality, and production operations
Added 4 hours ago
Senior AI & MLOps Engineer
Jobgether
Remote, United States
This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Senior AI & MLOps Engineer based in United States.
Added 4 hours ago
Solutions Engineer, AI Data
SimpleClosure
New York City, NY
- Flexible hybrid work environment in New York City, Midtown (currently 2 days per week in office)
Added 4 hours ago
SO
Assistant Area Consultant Liaison Engineer (TE4)
State of Washington
Shoreline, WA
- $7,768.92 to $10,452.75 USD / month
WSDOT is currently seeking a skilled Assistant Area Consultant Engineer (TE4) to join our team in Shoreline, WA. In this role, you will provide professional-level support to the Northwest…
Added 5 hours ago
J
CyberSecurity Engineer III
Jobgether
Remote, United States
- $120,000 to $180,000 USD / year
ITIL Foundation certification required
Added 5 hours ago
Staff Field Service Engineer
Amperesand
Reno, NV · San Francisco, CA
…customers and partners see us. We are hiring a Staff Field Service Engineer – MV to be our lead medium-voltage expert in the field: the person who makes sure every installation is safe,…

Phia LLC

Senior Baseline Security Engineer (CIS & STIGs)

United States

Apply on workforcenow.adp.com About employer

Applications open in a new tab.

Job details

Experience: 5+ years of experience providing support to Information Technology (IT) operations.
Posting language: English
Posted: Nov 6, 2026

Original job description

Status: Active – Immediate Need Location: Fully remote – U.S. only (no time on the client site expected) Focus Areas: CIS Benchmarks, DISA STIGs, Secure Configuration Baselines, Tenable Compliance Verification, and NIST 800-53 / FISMA Control Mapping

Overview

At phia we hire talented and passionate people who are focused on collaborative, meaningful work, providing technical and operational subject matter expertise and support services to our partners and clients. phia is seeking a mission-driven Senior Baseline Security Engineer to build and maintain the secure configuration baselines that protect a federal financial regulatory agency’s enterprise. You will step into an established baseline program as one of two contractors working with a federal lead, and own your assigned baselines end to end: creating, reviewing, and customizing security configuration baselines from CIS Benchmarks and DISA STIGs, tailoring controls with each system’s team rather than applying benchmarks out of the box, writing new baselines from vendor documentation where no benchmark exists, verifying systems with Tenable, and translating low-level settings into the FISMA, NIST 800-53, and client-specific security requirements the agency is measured against. The platform mix changes as new systems need baselines, so you will learn new technologies as you go. What You’ll Do

Build Baselines: Create security configuration baselines using CIS Benchmarks and DISA STIGs.
Tailor Benchmarks: Modify CIS and STIG benchmarks to meet the client’s organizational requirements, working with each system’s team to negotiate and document deviations and justifications.
Write from Scratch: Develop new baselines from vendor documentation for technologies without an existing benchmark.
Map to Controls: Translate low-level baseline settings into high-level FISMA, NIST 800-53, and client-specific security requirements.
Use Vulnerability Data: Apply NVD and CVE information to keep baselines current with emerging vulnerabilities.
Verify with Tenable: Run compliance scans to assess systems against existing baselines, reconcile findings with system owners, and keep baseline and scan results in step.
Learn New Platforms: Pick up whatever technology needs a baseline next - servers, network devices, cloud and SaaS services, mobile - and build competence quickly from vendor documentation.
Work Independently: Own assigned baselines with a light touch from the federal lead, and communicate status, deviations, and risk clearly.
Support IT Operations: Review and customize general security configuration baselines and support their rollout across the environment.

Who You Are

IT Operations Veteran: 5+ years supporting IT operations.
CIS & STIG Hands-On: You have created baselines using CIS and STIG benchmarks and modified them for an organization.
Baseline Author: You can build a baseline from scratch from vendor documentation.
NIST-Fluent: You know the NIST 800 series (800-30, -37, -53, -60, -63, -115, -137) and can map settings to controls.
Vulnerability-Aware: Comfortable with NVD and CVE data.
Scripting-Comfortable: Working familiarity with Linux; you can write a quick bash, PowerShell, or Python check to verify a setting, and you are at home with JSON/YAML.
Tenable-Capable: You have verified baselines with Tenable (Nessus / Security Center) or a comparable compliance scanner.
Autonomous Communicator: Comfortable owning work with minimal supervision, and clear with system owners when a control needs to bend.

Required Qualifications

5+ years of experience providing support to Information Technology (IT) operations.
Experience creating security baselines using CIS and STIG benchmarks.
Experience reviewing, developing, or customizing general security configuration baselines.
Knowledge of NIST 800 Special Publication series guidance for risk management and security control implementation, including 800-30, 800-37, 800-53, 800-60, 800-63, 800-115, or 800-137.
Knowledge of the National Vulnerability Database (NVD) and Common Vulnerabilities and Exposures (CVE).
Ability to create security baselines from scratch using vendor documentation.
Ability to modify CIS and STIG benchmarks to meet organizational requirements.
Ability to translate low-level security baseline requirements into high-level FISMA, NIST, and client-specific security requirements.

Preferred Skills

Experience verifying baselines with Tenable (Nessus, Security Center / Tenable.sc) compliance scans, including custom audit files.
Experience with networking (Cisco, Juniper, or Palo Alto); operating systems (Windows Server, Red Hat, or Linux); cloud services (AWS, Azure, Salesforce, Okta, O365, or ServiceNow); or mobile technologies (iOS or Citrix XenMobile).
Experience designing, building, and implementing automation tools, including Ansible, Chef, or Puppet.
Experience with Infrastructure-as-Code tools, including CloudFormation or Terraform.
Experience with container platforms, including OpenShift.
Experience with chaos engineering and blue/green deployments.
Experience with serverless, including AWS Lambda, API Gateway, Step Functions, and SAM.
Experience with JSON or YAML, and with scripting (bash, PowerShell, or Python) to check or apply settings.
AWS Certified Solutions Architect, AWS Certified Developer, CCNA, MCSE, or RHCSA certification; CompTIA, ISACA, or ISC2 certifications are also a plus.

Required Education + Clearance

Education: High school diploma or GED required; Bachelor’s Degree preferred (Experience can be substituted for education).
Certification: Preferred: AWS Certified Solutions Architect, AWS Certified Developer, CCNA, MCSE, or RHCSA; CompTIA, ISACA, or ISC2 certifications also a plus. None are required.
Clearance: Public Trust / Suitability; applicants selected will be subject to a security investigation.

GENERAL PROGRAM REQUIREMENTS:

Citizenship: Must be a U.S. Citizen.
Work Hours: Expected 8.5-hour workday (with a 30-minute break), aligned with the AppSec team’s hours - core hours of approximately 7:30 AM – 4:30 PM US Eastern Time (ET), Monday through Friday; daily team meeting at 8:30 AM ET; schedule is flexible with advance notice.
Work Location: Fully remote within the United States; no time on the client site expected.
Travel: Minimal.

Who We Are phia LLC ("phia") is a Northern Virginia based, small business established in 2011 with focus in Cyber Intelligence, Cyber Security/Defense, Intrusion Analysis & Incident Response, Cyber Architecture & Capability Analysis, Cyber Policy & Strategy, Information Assurance/Security, Compliance, Certification & Accreditation, Communications Security, Traditional Security, and Facilities Security. phia also provides cyber operations support functions such as: Program and Process Management, Engineering, Development, and Systems Administration that allows for Cyber Operations to efficiently integrate our customer's missions and objectives. phia supports various agencies and offices within the Department of Defense (DoD), Federal government, and private/commercial entities.

phia offers excellent benefits to enhance work-life balance, including the following:

Medical Insurance
Dental Insurance
Vision Insurance
Life Insurance
Short Term & Long Term Disability
401k Retirement Savings Plan with Company Match
Paid Holidays
Paid Time Off (PTO)
Tuition and Professional Development Assistance

phia does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity, or any other reason prohibited by law in the provision of employment opportunities and benefits.

Apply on workforcenow.adp.com About employer

More about this job

Skills

Documentation
Security regulations
Regulatory compliance
Work independently
Linux
Microsoft PowerShell
Python
Nessus
Computer technology
Risk management
Microsoft Windows Server
AWS
Microsoft Azure
Salesforce
Microsoft 365
ServiceNow
Ansible
Puppet
Infrastructure as code
IBM Terraform
Red Hat OpenShift
SAM
AWS certification
CCNA
MCSE

Report this job

Work requirements

Jobs in the United States