Jobs in the United States

25+ jobs

Save this search

Added 10 hours ago
Senior Full Stack Salesforce Developer
Better Impact
Remote, United States
Better Impact is looking for a Senior Full Stack Salesforce Developer to help support and evolve our HandsOn Connect platform. This role works across managed package development, bug fixes,…
Added 20 hours ago
Salesforce Platform Lead
Tierpoint
Remote, United States
The Salesforce Platform Lead is the role model for implementing new and break-fix work at TierPoint. The technical lead works closely with the Salesforce architect to shape a vision, set…
Added 1 day ago
Agentforce Forward Deployed Engineer (FDE)
DivIHN Integration, Inc
Hoffman Estates, IL
Added 1 day ago
Software Engineer Consultant - Salesforce (Remote - NC, AZ, TX)
First Citizens Bank
Raleigh, NC · Phoenix, AZ · Austin, TX
As a Software Developer Consultant, you will have the opportunity to influence solution design, improve engineering practices, modernize DevOps capabilities, and help shape the future…
Added 1 day ago
Senior Salesforce Developer (Remote - US)
ICF Incorporated, LLC
Reston, VA
As Senior Developer, you will lead integrations using Web Services and APIs and lead data migration efforts from legacy applications. You will be responsible for Salesforce declarative or…
Added 1 day ago
Director of Architecture & Engineering
ACN COMMUNICATIONS SERVICES LLC
Charlotte, NC
…modernization, engineering standards and team effectiveness across VIP, Salesforce and integrated platforms. Initially operates approximately 50% hands-on while establishing the function,…
Added 1 day ago
Marketing Engineer (AI Agents)
Cresta
Remote, United States
…puts its own AI agents to work for marketing use cases. You'll architect and build our web platform, create the tooling that lets marketers ship without an engineer in the loop, and develop…
Added 1 day ago
AI Growth Engineer
Cresta
Remote, United States
…puts its own AI agents to work for marketing use cases. You'll architect and build our web platform, create the tooling that lets marketers ship without an engineer in the loop, and develop…
Added 2 days ago
Senior Tax Accountant
Samsara
Remote, United States
This is remote position open to candidates residing in the US except Alaska, Austin Metro, Boulder Metro, California, Chicago Metro, Connecticut, Dallas Metro, Denver Metro, Houston Metro,…
Added 2 days ago
SO
Principal Developer (Salesforce) Remote From Anywhere In CO
State of Colorado
CO
- $122,000 to $137,000 USD / year
Minimum of seven (7) years in a Salesforce Developer or Architect role.
Added 2 days ago
Senior Baseline Security Engineer (CIS & STIGs)
Phia LLC
United States
AWS Certified Solutions Architect, AWS Certified Developer, CCNA, MCSE, or RHCSA certification; CompTIA, ISACA, or ISC2 certifications are also a plus.
Added 2 days ago
Data Architect
The Emily Program
Roseville, MN
The Data Architect defines and governs the enterprise data architecture for a modern Azure-based platform integrating Avatar NX, Salesforce, and financial systems. This role establishes a…
Added 2 days ago
Data Architect
Accanto Health
Roseville, MN
The Data Architect defines and governs the enterprise data architecture for a modern Azure-based platform integrating Avatar NX, Salesforce, and financial systems. This role establishes a…
Added 2 days ago
EC
Data Analyst
Entrust Corporation
Shakopee, MN
- $87,118 to $127,773 USD / year
Work closely with Business Intelligence teams to architect, develop, and continuously improve data sources, ensuring data quality, scalability, and alignment with evolving business and…
Added 2 days ago
Technical Architect (ERP, SCM & Projects Integrations)
ApexIT
Remote, United States
…employee, and student experiences. Since 1997, Apex IT our Salesforce and Oracle experts have provided a full range of enterprise solutions including CRM and related applications that…
Added 2 days ago
Sr. Director, Global Technology PMO Leader
Direct Travel
United States
…logs, status reporting) across the Intake, Review, Assess & Architect, Analyze & Decide, Delivery, and Measure & Iterate lifecycle, while adhering to an Agile…
Added 2 days ago
Power Platform Architect
Booz Allen Hamilton_United States
Atlanta, GA
Experience with .Net, Java, Python, JavaScript, SQL, Power Platform, ServiceNow, SalesForce, Pega, Appian, or OpenText
Added 2 days ago
Senior DevOps Engineer (AWS)
Qvest US
NY · Los Angeles, CA
…analytics, IP & rights management, broadcast transformation, Salesforce and applied AI, our exceptionally talented teams partner with Fortune 1,000 companies to revolutionize markets and…
Added 2 days ago
DevOps Engineer (AWS)
Qvest US
NY · Los Angeles, CA
…analytics, IP & rights management, broadcast transformation, Salesforce and applied AI, our exceptionally talented teams partner with Fortune 1,000 companies to revolutionize markets and…
Added 2 days ago
Enterprise Account Manager - TX
Boomi
United States
Cross-functional selling experience (Architect, CTO, VP Ecommerce, Professional Services) and selling with GSI/SI.
Added 2 days ago
Enterprise Account Manager - Southeast
Boomi
United States
Cross-functional selling experience (Architect, CTO, VP Ecommerce, Professional Services) and selling with GSI/SI.
Added 2 days ago
Enterprise Account Executive
Boomi
United States
…work with world-class people and industry-leading technology. remote and hybrid work environments. We hire trailblazers with an entrepreneurial spirit who can solve challenging problems,…
Added 2 days ago
Marketing Manager US
CM.com
Remote, United States
…marketing, and see your work show up in pipeline. This is a fully remote role for candidates based in the Eastern Time…
Added 2 days ago
Sales Account Manager - Vertical Sales Discrete Mid-Market
Siemens
Boston, MA
…coordinates with the assigned Sales Acceleration Customer Solution Architect (CSA) to address all aspects of customer pursuit and relationship development. This individual will need to be…
Added 2 days ago
REMOTE Senior Amazon Connect Engineer
Insight Global
Baltimore, MD
…capabilities. They will also develop integrations across AWS services, Salesforce/CRM platforms, APIs, and downstream data systems while driving platform scalability, security, reliability,…

Phia LLC

Senior Baseline Security Engineer (CIS & STIGs)

United States

Apply About employer

Applications open in a new tab.

Job details

Experience: 5+ years of experience providing support to Information Technology (IT) operations.
Posting language: English

Original job description

Status: Active – Immediate Need Location: Fully remote – U.S. only (no time on the client site expected) Focus Areas: CIS Benchmarks, DISA STIGs, Secure Configuration Baselines, Tenable Compliance Verification, and NIST 800-53 / FISMA Control Mapping

Overview

At phia we hire talented and passionate people who are focused on collaborative, meaningful work, providing technical and operational subject matter expertise and support services to our partners and clients. phia is seeking a mission-driven Senior Baseline Security Engineer to build and maintain the secure configuration baselines that protect a federal financial regulatory agency’s enterprise. You will step into an established baseline program as one of two contractors working with a federal lead, and own your assigned baselines end to end: creating, reviewing, and customizing security configuration baselines from CIS Benchmarks and DISA STIGs, tailoring controls with each system’s team rather than applying benchmarks out of the box, writing new baselines from vendor documentation where no benchmark exists, verifying systems with Tenable, and translating low-level settings into the FISMA, NIST 800-53, and client-specific security requirements the agency is measured against. The platform mix changes as new systems need baselines, so you will learn new technologies as you go. What You’ll Do

Build Baselines: Create security configuration baselines using CIS Benchmarks and DISA STIGs.
Tailor Benchmarks: Modify CIS and STIG benchmarks to meet the client’s organizational requirements, working with each system’s team to negotiate and document deviations and justifications.
Write from Scratch: Develop new baselines from vendor documentation for technologies without an existing benchmark.
Map to Controls: Translate low-level baseline settings into high-level FISMA, NIST 800-53, and client-specific security requirements.
Use Vulnerability Data: Apply NVD and CVE information to keep baselines current with emerging vulnerabilities.
Verify with Tenable: Run compliance scans to assess systems against existing baselines, reconcile findings with system owners, and keep baseline and scan results in step.
Learn New Platforms: Pick up whatever technology needs a baseline next - servers, network devices, cloud and SaaS services, mobile - and build competence quickly from vendor documentation.
Work Independently: Own assigned baselines with a light touch from the federal lead, and communicate status, deviations, and risk clearly.
Support IT Operations: Review and customize general security configuration baselines and support their rollout across the environment.

Who You Are

IT Operations Veteran: 5+ years supporting IT operations.
CIS & STIG Hands-On: You have created baselines using CIS and STIG benchmarks and modified them for an organization.
Baseline Author: You can build a baseline from scratch from vendor documentation.
NIST-Fluent: You know the NIST 800 series (800-30, -37, -53, -60, -63, -115, -137) and can map settings to controls.
Vulnerability-Aware: Comfortable with NVD and CVE data.
Scripting-Comfortable: Working familiarity with Linux; you can write a quick bash, PowerShell, or Python check to verify a setting, and you are at home with JSON/YAML.
Tenable-Capable: You have verified baselines with Tenable (Nessus / Security Center) or a comparable compliance scanner.
Autonomous Communicator: Comfortable owning work with minimal supervision, and clear with system owners when a control needs to bend.

Required Qualifications

5+ years of experience providing support to Information Technology (IT) operations.
Experience creating security baselines using CIS and STIG benchmarks.
Experience reviewing, developing, or customizing general security configuration baselines.
Knowledge of NIST 800 Special Publication series guidance for risk management and security control implementation, including 800-30, 800-37, 800-53, 800-60, 800-63, 800-115, or 800-137.
Knowledge of the National Vulnerability Database (NVD) and Common Vulnerabilities and Exposures (CVE).
Ability to create security baselines from scratch using vendor documentation.
Ability to modify CIS and STIG benchmarks to meet organizational requirements.
Ability to translate low-level security baseline requirements into high-level FISMA, NIST, and client-specific security requirements.

Preferred Skills

Experience verifying baselines with Tenable (Nessus, Security Center / Tenable.sc) compliance scans, including custom audit files.
Experience with networking (Cisco, Juniper, or Palo Alto); operating systems (Windows Server, Red Hat, or Linux); cloud services (AWS, Azure, Salesforce, Okta, O365, or ServiceNow); or mobile technologies (iOS or Citrix XenMobile).
Experience designing, building, and implementing automation tools, including Ansible, Chef, or Puppet.
Experience with Infrastructure-as-Code tools, including CloudFormation or Terraform.
Experience with container platforms, including OpenShift.
Experience with chaos engineering and blue/green deployments.
Experience with serverless, including AWS Lambda, API Gateway, Step Functions, and SAM.
Experience with JSON or YAML, and with scripting (bash, PowerShell, or Python) to check or apply settings.
AWS Certified Solutions Architect, AWS Certified Developer, CCNA, MCSE, or RHCSA certification; CompTIA, ISACA, or ISC2 certifications are also a plus.

Required Education + Clearance

Education: High school diploma or GED required; Bachelor’s Degree preferred (Experience can be substituted for education).
Certification: Preferred: AWS Certified Solutions Architect, AWS Certified Developer, CCNA, MCSE, or RHCSA; CompTIA, ISACA, or ISC2 certifications also a plus. None are required.
Clearance: Public Trust / Suitability; applicants selected will be subject to a security investigation.

GENERAL PROGRAM REQUIREMENTS:

Citizenship: Must be a U.S. Citizen.
Work Hours: Expected 8.5-hour workday (with a 30-minute break), aligned with the AppSec team’s hours - core hours of approximately 7:30 AM – 4:30 PM US Eastern Time (ET), Monday through Friday; daily team meeting at 8:30 AM ET; schedule is flexible with advance notice.
Work Location: Fully remote within the United States; no time on the client site expected.
Travel: Minimal.

Who We Are phia LLC ("phia") is a Northern Virginia based, small business established in 2011 with focus in Cyber Intelligence, Cyber Security/Defense, Intrusion Analysis & Incident Response, Cyber Architecture & Capability Analysis, Cyber Policy & Strategy, Information Assurance/Security, Compliance, Certification & Accreditation, Communications Security, Traditional Security, and Facilities Security. phia also provides cyber operations support functions such as: Program and Process Management, Engineering, Development, and Systems Administration that allows for Cyber Operations to efficiently integrate our customer’s missions and objectives. phia supports various agencies and offices within the Department of Defense (DoD), Federal government, and private/commercial entities.

phia offers excellent benefits to enhance work-life balance, including the following:

Medical Insurance
Dental Insurance
Vision Insurance
Life Insurance
Short Term & Long Term Disability
401k Retirement Savings Plan with Company Match
Paid Holidays
Paid Time Off (PTO)
Tuition and Professional Development Assistance

phia does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity, or any other reason prohibited by law in the provision of employment opportunities and benefits.

Apply About employer

More about this job

Skills

Documentation
Security regulations
Regulatory compliance
Work independently
Linux
Microsoft PowerShell
Python
Nessus
Computer technology
Risk management
Microsoft Windows Server
AWS
Microsoft Azure
Salesforce
Microsoft 365
ServiceNow
Ansible
Puppet
Infrastructure as code
IBM Terraform
Red Hat OpenShift
SAM
AWS certification
CCNA
MCSE

Report this job