Jobs in the United States

25+ jobs

Save this search

Added 4 mins ago
AI Connect Principal Engineer
Verizon Services Corp. BC
Irving, TX · Chicago, IL · Denver, CO · Basking Ridge, NJ · Las Vegas, NV · Chandler, AZ · Kansas City, MO
Verizon is aggressively expanding and modernizing its core fiber infrastructure to power next-generation artificial intelligence workloads, hyperscale compute clusters, and critical cloud…
Added 6 mins ago
Cloud Infrastructure Engineer
IPG
Atlanta, GA · Tampa, FL · Charlotte, NC · Orlando, FL · Washington, DC · Raleigh, NC · Jacksonville, FL · New York, NY
Immediate Supervisor: Director, Enterprise Infrastructure
Added 18 mins ago
Associate Project Engineer
USABB ABB Inc.
Houston, TX
Part of the Engineering team in Process Automation Energy Industries in the USA, the Associate Project Engineer assists all aspects of system implementation of a project including loading…
Added 35 mins ago
Engineer IV - Electrical
DVJ Consulting Engineers
Los Angeles, CA
The portfolio includes Energy Information Systems (EIS), Sustainability and Climate Action Roadmap, Building Management Systems (BMS), Central Plant and Local Building Decarbonization,…
Added 41 mins ago
CO
Senior Engineer/Senior Project Manager
City of San Mateo
San Mateo, CA
- $149,364 to $194,916 USD / year
…department is responsible for the City’s major capital projects and infrastructure including streets, streetlights, traffic signals, publicly owned facilities, sewer and storm conveyance…
Added 55 mins ago
Technical Marketing Engineering Technical Leader
Cisco Systems, Inc.
Milpitas, CA
Experience working directly with enterprise customers as a Solution Architect, Systems Engineer, Customer Experience Engineer, Technical Marketing Engineer, or similar technical leadership…
Added 1 hour ago
J
Water Wastewater Business Development Leader
Jobgether
Remote, United States
- $200,000 to $250,000 USD / year
Opportunity to influence major infrastructure programs addressing aging systems, regulatory challenges, and long-term community resilience.
Added 1 hour ago
Sr Product Manager - Solutions
Cisco Systems, Inc.
San Jose, CA
Experience working directly with enterprise customers as a Solution Architect, Systems Engineer, Customer Experience Engineer, Technical Marketing Engineer, or similar technical leadership…
Added 1 hour ago
G
Transportation Engineer
GPAC
Bloomington, IN
- $70,000 to $145,000 USD / year
We are seeking a Transportation Engineer to join a dynamic, multi-disciplinary engineering consulting firm. This individual will contribute to the planning, design, and delivery of…
Added 1 hour ago
AWS Cloud Engineer IV
IGH ICW GROUP HOLDINGS, INC.
San Diego, CA
The purpose of the AWS Cloud Engineer IV is to design, implement, and maintain cloud infrastructure systems using Amazon Web Services (AWS). This position will play a crucial role in…
Added 1 hour ago
Sr Project Manager - AI Data Centers
Jacobs
North Miami Beach, FL · Orlando, FL
…scale and with a client roster that defines the future of AI infrastructure. You will manage engineering-side project execution from basis of design through IFC, construction…
Added 1 hour ago
Engineer III - Transmission Planning
Qualus
Orlando, FL
Power your future with Qualus in our Transmission Planning Department as a fully remote Engineer III. Due to continued growth, we are seeking seasoned Transmission Planning Engineers.
Added 1 hour ago
Ground Software DevOps Release Engineer III (TS/SCI Required) - Blue Ring
Blue Origin Personnel, LLC
Denver, CO · Reston, VA
As part of a hardworking team of engineers, you will play a meaningful role in the software lifecycle of ground-based systems that support our space missions and advancing ground…
Added 1 hour ago
DO
SUPERVISING ENGINEER WATER RESOURCES
Department of Water Resources
CA
- $12,562 to $15,724 USD / month
…State Legislature. We manage California’s water resources, systems, and infrastructure, including the State Water Project, in a responsible sustainable…
Added 1 hour ago
DO
Senior Safety Engineer
Department of Water Resources
CA
- $11,427 to $14,298 USD / month
…State Legislature. We manage California’s water resources, systems, and infrastructure, including the State Water Project, in a responsible sustainable…
Added 1 hour ago
DO
Senior Safety Engineer
Department of Water Resources
CA
- $11,427 to $14,298 USD / month
…State Legislature. We manage California’s water resources, systems, and infrastructure, including the State Water Project, in a responsible sustainable…
Added 1 hour ago
Senior Software Engineer
DomainTools
Remote, United States
DomainTools is hiring a Senior Software Engineer to join our Engineering Team. This role is perfect for a creative problem-solver with deep expertise in large-scale data engineering and a…
Added 1 hour ago
Senior Software Engineer
DomainTools
Remote, United States
DomainTools is hiring a Senior Software Engineer to join our Engineering Team. This role is perfect for a creative problem-solver with deep expertise in large-scale data engineering and a…
Added 1 hour ago
Senior Software Engineer
DomainTools
Remote, United States
DomainTools is hiring a Senior Software Engineer to join our Engineering Team. This role is perfect for a creative problem-solver with deep expertise in large-scale data engineering and a…
Added 1 hour ago
Senior Software Engineer
DomainTools
Remote, United States
DomainTools is hiring a Senior Software Engineer to join our Engineering Team. This role is perfect for a creative problem-solver with deep expertise in large-scale data engineering and a…
Added 1 hour ago
Lead Specialist, Technical Architect
Pearson
Jefferson City, MO
As a Quality Engineer Architect aligned to the E30 expert track, you provide domain-level quality leadership for ExamDeveloper. This role is unique within the ExamDeveloper quality…
Added 1 hour ago
IT Security Engineer II
CMTelematics
Cambridge, MA
CMT is looking for a highly motivated and collaborative IT Security Engineer to join the CMT team. Reporting to the leader of IT Security, you will work in a highly collaborative role,…
Added 2 hours ago
DN
AWS Cloud Data Engineer 3065-18
Delaware Nation Industries
Dahlgren, VA
- $150,000 to $170,000 USD / year
DNI is seeking a highly qualified Data Engineer to support the Joint Warfare Analysis Center (JWAC) under Air Force JWAC IT Services (JITS) Task Order 2. The Data Engineer will design,…
Added 2 hours ago
Field Service Engineer - 304344
Delaware Nation Industries
Fort Stewart, GA
DNI Emerging Technologies is seeking a qualified Field Service Engineer to support the Army Systems Engineering and Program Management Services (Army SEPM) at Fort Stewart, GA.
Added 2 hours ago
Senior Linux System Administrator - 306502
Delaware Nation Industries
Dahlgren, VA
Delaware Nation Industries is seeking a Linux System Administrator – Senior to provide advanced systems administration and engineering support for the Air Force Joint Worldwide Intelligence…

Phia LLC

Senior Baseline Security Engineer (CIS & STIGs)

United States

Apply About employer

Applications open in a new tab.

Job details

Experience: 5+ years of experience providing support to Information Technology (IT) operations.
Posting language: English

Original job description

Status: Active – Immediate Need Location: Fully remote – U.S. only (no time on the client site expected) Focus Areas: CIS Benchmarks, DISA STIGs, Secure Configuration Baselines, Tenable Compliance Verification, and NIST 800-53 / FISMA Control Mapping

Overview

At phia we hire talented and passionate people who are focused on collaborative, meaningful work, providing technical and operational subject matter expertise and support services to our partners and clients. phia is seeking a mission-driven Senior Baseline Security Engineer to build and maintain the secure configuration baselines that protect a federal financial regulatory agency’s enterprise. You will step into an established baseline program as one of two contractors working with a federal lead, and own your assigned baselines end to end: creating, reviewing, and customizing security configuration baselines from CIS Benchmarks and DISA STIGs, tailoring controls with each system’s team rather than applying benchmarks out of the box, writing new baselines from vendor documentation where no benchmark exists, verifying systems with Tenable, and translating low-level settings into the FISMA, NIST 800-53, and client-specific security requirements the agency is measured against. The platform mix changes as new systems need baselines, so you will learn new technologies as you go. What You’ll Do

Build Baselines: Create security configuration baselines using CIS Benchmarks and DISA STIGs.
Tailor Benchmarks: Modify CIS and STIG benchmarks to meet the client’s organizational requirements, working with each system’s team to negotiate and document deviations and justifications.
Write from Scratch: Develop new baselines from vendor documentation for technologies without an existing benchmark.
Map to Controls: Translate low-level baseline settings into high-level FISMA, NIST 800-53, and client-specific security requirements.
Use Vulnerability Data: Apply NVD and CVE information to keep baselines current with emerging vulnerabilities.
Verify with Tenable: Run compliance scans to assess systems against existing baselines, reconcile findings with system owners, and keep baseline and scan results in step.
Learn New Platforms: Pick up whatever technology needs a baseline next - servers, network devices, cloud and SaaS services, mobile - and build competence quickly from vendor documentation.
Work Independently: Own assigned baselines with a light touch from the federal lead, and communicate status, deviations, and risk clearly.
Support IT Operations: Review and customize general security configuration baselines and support their rollout across the environment.

Who You Are

IT Operations Veteran: 5+ years supporting IT operations.
CIS & STIG Hands-On: You have created baselines using CIS and STIG benchmarks and modified them for an organization.
Baseline Author: You can build a baseline from scratch from vendor documentation.
NIST-Fluent: You know the NIST 800 series (800-30, -37, -53, -60, -63, -115, -137) and can map settings to controls.
Vulnerability-Aware: Comfortable with NVD and CVE data.
Scripting-Comfortable: Working familiarity with Linux; you can write a quick bash, PowerShell, or Python check to verify a setting, and you are at home with JSON/YAML.
Tenable-Capable: You have verified baselines with Tenable (Nessus / Security Center) or a comparable compliance scanner.
Autonomous Communicator: Comfortable owning work with minimal supervision, and clear with system owners when a control needs to bend.

Required Qualifications

5+ years of experience providing support to Information Technology (IT) operations.
Experience creating security baselines using CIS and STIG benchmarks.
Experience reviewing, developing, or customizing general security configuration baselines.
Knowledge of NIST 800 Special Publication series guidance for risk management and security control implementation, including 800-30, 800-37, 800-53, 800-60, 800-63, 800-115, or 800-137.
Knowledge of the National Vulnerability Database (NVD) and Common Vulnerabilities and Exposures (CVE).
Ability to create security baselines from scratch using vendor documentation.
Ability to modify CIS and STIG benchmarks to meet organizational requirements.
Ability to translate low-level security baseline requirements into high-level FISMA, NIST, and client-specific security requirements.

Preferred Skills

Experience verifying baselines with Tenable (Nessus, Security Center / Tenable.sc) compliance scans, including custom audit files.
Experience with networking (Cisco, Juniper, or Palo Alto); operating systems (Windows Server, Red Hat, or Linux); cloud services (AWS, Azure, Salesforce, Okta, O365, or ServiceNow); or mobile technologies (iOS or Citrix XenMobile).
Experience designing, building, and implementing automation tools, including Ansible, Chef, or Puppet.
Experience with Infrastructure-as-Code tools, including CloudFormation or Terraform.
Experience with container platforms, including OpenShift.
Experience with chaos engineering and blue/green deployments.
Experience with serverless, including AWS Lambda, API Gateway, Step Functions, and SAM.
Experience with JSON or YAML, and with scripting (bash, PowerShell, or Python) to check or apply settings.
AWS Certified Solutions Architect, AWS Certified Developer, CCNA, MCSE, or RHCSA certification; CompTIA, ISACA, or ISC2 certifications are also a plus.

Required Education + Clearance

Education: High school diploma or GED required; Bachelor’s Degree preferred (Experience can be substituted for education).
Certification: Preferred: AWS Certified Solutions Architect, AWS Certified Developer, CCNA, MCSE, or RHCSA; CompTIA, ISACA, or ISC2 certifications also a plus. None are required.
Clearance: Public Trust / Suitability; applicants selected will be subject to a security investigation.

GENERAL PROGRAM REQUIREMENTS:

Citizenship: Must be a U.S. Citizen.
Work Hours: Expected 8.5-hour workday (with a 30-minute break), aligned with the AppSec team’s hours - core hours of approximately 7:30 AM – 4:30 PM US Eastern Time (ET), Monday through Friday; daily team meeting at 8:30 AM ET; schedule is flexible with advance notice.
Work Location: Fully remote within the United States; no time on the client site expected.
Travel: Minimal.

Who We Are phia LLC ("phia") is a Northern Virginia based, small business established in 2011 with focus in Cyber Intelligence, Cyber Security/Defense, Intrusion Analysis & Incident Response, Cyber Architecture & Capability Analysis, Cyber Policy & Strategy, Information Assurance/Security, Compliance, Certification & Accreditation, Communications Security, Traditional Security, and Facilities Security. phia also provides cyber operations support functions such as: Program and Process Management, Engineering, Development, and Systems Administration that allows for Cyber Operations to efficiently integrate our customer’s missions and objectives. phia supports various agencies and offices within the Department of Defense (DoD), Federal government, and private/commercial entities.

phia offers excellent benefits to enhance work-life balance, including the following:

Medical Insurance
Dental Insurance
Vision Insurance
Life Insurance
Short Term & Long Term Disability
401k Retirement Savings Plan with Company Match
Paid Holidays
Paid Time Off (PTO)
Tuition and Professional Development Assistance

phia does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity, or any other reason prohibited by law in the provision of employment opportunities and benefits.

Apply About employer

More about this job

Skills

Documentation
Security regulations
Regulatory compliance
Work independently
Linux
Microsoft PowerShell
Python
Nessus
Computer technology
Risk management
Microsoft Windows Server
AWS
Microsoft Azure
Salesforce
Microsoft 365
ServiceNow
Ansible
Puppet
Infrastructure as code
IBM Terraform
Red Hat OpenShift
SAM
AWS certification
CCNA
MCSE

Report this job