Baseline Security Engineer, Senior

MBL Technologies • Washington, DC

1d

About The Position

MBL Technologies is seeking an experienced Baseline Security Engineer to support cybersecurity engineering, vulnerability management, and compliance initiatives for a federal government customer. The role develops, implements, and maintains enterprise security baselines using CIS Benchmarks, DISA STIGs, and NIST guidance. The successful candidate will develop secure configuration standards, support compliance initiatives, and translate technical security requirements into actionable controls that strengthen enterprise security posture. The position requires the ability to obtain and maintain a Public Trust or Suitability/Fitness determination.

Requirements

• At least 5 years of experience supporting Information Technology operations.
• Experience creating security baselines using CIS and STIG benchmarks.
• Experience reviewing, developing, or customizing general security configuration baselines.
• Knowledge of NIST Special Publication guidance, including 800-30, 800-37, 800-53, 800-60, 800-63, 800-115, and 800-137.
• Knowledge of the National Vulnerability Database (NVD) and Common Vulnerabilities and Exposures (CVE).
• Ability to create security baselines from scratch using vendor documentation.
• Ability to modify CIS and STIG benchmarks to meet organizational requirements.
• Ability to translate low-level security requirements into high-level FISMA, NIST, and client-specific requirements.
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination.
• High school diploma or GED.

Nice To Haves

• Experience with Cisco, Juniper, Palo Alto, Windows Server, Red Hat, Linux, AWS, Azure, Salesforce, Okta, Microsoft 365, or ServiceNow.
• Experience designing and implementing automation tools such as Ansible, Chef, or Puppet.
• Experience with Infrastructure-as-Code technologies such as Terraform or CloudFormation.
• Experience with OpenShift and containerized environments.
• Experience with chaos engineering and blue/green deployments.
• Experience with serverless technologies such as Lambda, API Gateway, Step Functions, and SAM.
• Experience with application performance monitoring and analysis platforms such as ELK.
• Experience with JSON or YAML programming.
• Bachelor's degree.
• AWS Certified Solutions Architect, AWS Certified Developer, CCNA, MCSE, RHCSA, EBSA, ECSS, or similar certifications.
• Military Occupational Specialty codes listed in the posting: 170A, 170D, 17A, 17B, 17C, 17D, 24B, 25B, 47D, 94F, IT, 17 5309, 6203, 9735, 9740, 9890, or 9891.

Responsibilities

• Create and maintain security baselines utilizing CIS Benchmarks and DISA STIGs.
• Review, develop, and customize security configuration standards for enterprise technologies.
• Support vulnerability management and remediation initiatives.
• Research and analyze security vulnerabilities using NVD and CVE resources.
• Develop baseline configurations using vendor documentation and security guidance.
• Translate technical requirements into FISMA, NIST, and client-specific compliance requirements.
• Support assessment, authorization, and continuous monitoring activities.
• Work with engineering, operations, and cybersecurity teams to implement secure configurations.
• Develop technical documentation, security standards, and configuration guidance.
• Support audit readiness and compliance reporting efforts.

Benefits

• Competitive salary adjusted for candidate qualifications.
• Incentive plans with corporate- and individual-based performance bonuses.
• 401(k).
• PTO.
• Remote work.
• Health and wellness programs.
• Employee discounts.
• Learning and development reimbursement.
• Professional development opportunities.
• Community engagement, volunteerism, and employee connection.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: High school or GED