Baseline Security Engineer, Lead
About The Position
As a cyber professional supporting the SEC’s cyber mission, the Baseline Security Engineer helps inform security strategies and mitigate vulnerabilities. The role works across cloud computing, data engineering, and enterprise workflow platforms, collaborating with stakeholders to evaluate system risks, analyze NIST controls, and determine appropriate system security measures. The engineer monitors security environments and platforms for evolving threats, identifies security gaps from an adversary’s perspective, and helps strengthen the SEC’s security posture. The position focuses on creating, reviewing, developing, and customizing security configuration baselines using CIS and STIG benchmarks, vendor documentation, and NIST guidance. It also translates low-level baseline requirements into higher-level FISMA, NIST, and client-specific security requirements. Applicants selected may be subject to a government investigation and must be able to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements.
Requirements
- At least 5 years of experience providing support to IT operations.
- Experience creating security baselines using CIS and STIG benchmarks.
- Experience working with NIST 800 Special Publication guidance for risk management and security control implementation, including 800-30, 800-37, 800-53, 800-60, 800-63, 800-115, or 800-137.
- Experience reviewing, developing, or customizing general security configuration baselines.
- Knowledge of the National Vulnerability Database (NVD) and Common Vulnerability Enumeration (CVE).
- Ability to create security baselines from scratch using vendor documentation.
- Ability to modify CIS and STIG benchmarks to meet organizational requirements.
- Ability to translate low-level security baseline requirements into high-level FISMA and NIST requirements and client-specific security requirements.
- Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements.
- High school diploma or GED.
Nice To Haves
- Experience with networking technologies such as Cisco, Juniper, or Palo Alto; operating systems such as Windows Server, Red Hat, or Linux; cloud services such as AWS, Azure, Salesforce, Okta, O365, or ServiceNow; or mobile technologies such as iOS or Xen Mobile.
- Experience designing, building, and implementing automation tools such as Ansible, Chef, or Puppet.
- Experience with Infrastructure-as-Code tools such as CloudFormation or Terraform.
- Experience with container platforms such as OpenShift.
- Experience with chaos engineering and blue/green deployments.
- Experience with serverless technologies such as Lambda, API Gateway, Step Functions, and SAM.
- Experience with application performance analysis and monitoring, including ELK.
- Experience with JSON or YAML programming.
- Bachelor’s degree.
- AWS Certified Solutions Architect, AWS Certified Developer, CCNA, MSCE, RHCSA, EBSA, or ECSS certification.
Responsibilities
- Support information technology operations.
- Create security baselines using CIS and STIG benchmarks and vendor documentation.
- Review, develop, and customize general security configuration baselines.
- Modify CIS and STIG benchmarks to meet organizational requirements.
- Apply NIST guidance to risk management and security control implementation.
- Translate low-level security baseline requirements into high-level FISMA, NIST, and client-specific security requirements.
- Monitor security environments and platforms for new and evolving threats.
- Identify security gaps and system risks, including from an adversary’s perspective.
- Collaborate with stakeholders to evaluate risks, analyze controls, and determine how to secure systems.
Benefits
- Health, life, and disability benefits.
- Financial and retirement benefits.
- Paid leave.
- Professional development.
- Tuition assistance.
- Work-life programs.
- Dependent care.
- Recognition awards for exceptional performance and demonstration of company values.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
High school or GED
