Baseline Security Engineer

Baseline Security Engineer

Overview

Support Information Technology operations by creating, reviewing, developing, and customizing security configuration baselines using CIS and STIG benchmarks. Apply NIST 800 Special Publication series guidance, vulnerability database knowledge, and vendor documentation to support security baseline development and implementation.

Education Requirements

High School Diploma is preferred.

Certification Requirements

Certifications are preferred, but not required.

Clearance Requirements

Public Trust or Suitability/Fitness determination clearance is required.

Work Arrangement

Remote anywhere in the US

Required Qualifications

• 5+ years of experience providing support to Information Technology operations.
• Experience creating security baselines using CIS and STIG benchmarks.
• Experience reviewing, developing, or customizing general security configuration baselines.
• Knowledge of NIST 800 Special Publication series guidance for risk management and security control implementation, including 800-30, 800-37, 800-53, 800-60, 800-63, 800-115, or 800-137.
• Knowledge of the National Vulnerability Database and Common Vulnerability Enumeration.
• Ability to create security baselines from scratch using vendor documentation.
• Ability to modify CIS and STIG benchmarks to meet organizational requirements.
• Ability to translate low-level security baseline requirements into high-level FISMA and NIST requirements.
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination.

Desired Skills

• Experience with networking, including Cisco, Juniper, or Palo Alto.
• Experience with operating systems, including Windows Server, Red Hat, or Linux.
• Experience with cloud services, including AWS, Azure, Salesforce, Okta, O365, or ServiceNow.
• Experience with mobile technologies, including iOS or Xen Mobile.
• Experience designing, building, and implementing automation tools, including Ansible, Chef, or Puppet.
• Experience with Infrastructure-as-Code tools, including CloudFormation or Terraform.
• Experience with container platforms, including OpenShift.
• Experience with chaos engineering and blue or green deployments.
• Experience with serverless technologies, including Lambda, API Gateway, Step Functions, and SAM.
• Experience with application performance analysis and monitoring, including ELK.
• Experience with JSON or YMAL programming.
• Bachelor's degree.
• AWS Certified Solutions Architect, AWS Certified Developer, CCNA, MSCE, RHCSA, EBSA, or ECSS certification.

Pay Range

$145,000.00–$180,000.00 (annual)

Why Apply

This role provides an opportunity to apply security baseline expertise across CIS, STIG, NIST, FISMA, NVD, and CVE frameworks. The position also offers the opportunity to work with a broad range of networking, operating system, cloud, automation, infrastructure-as-code, container, serverless, and monitoring technologies.

Equal Employment Opportunity

Take2 is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, disability status, or any other characteristic protected by law. If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to access job openings or apply for a job on this site as a result of your disability. You can request reasonable accommodations by contacting Careers@Take2it.com.