Senior Information Security Engineer

This is an opportunity for an experienced information security professional to strengthen the security and compliance posture of critical IT systems in a fully remote environment. You will develop, assess, and maintain security configuration baselines aligned with industry standards and federal requirements. Working with frameworks such as CIS Benchmarks, STIGs, and NIST guidance, you will identify vulnerabilities and translate technical findings into practical security improvements. You will collaborate with technical teams and stakeholders to implement reliable, compliant configurations and support ongoing risk management activities. This role is well suited to an analytical, detail-oriented engineer who enjoys solving complex security challenges and contributing to mission-critical technology environments.

• High school diploma or GED required; a bachelor's degree is preferred.

• At least 5 years of experience supporting IT operations.

• Demonstrated experience creating security baselines using CIS Benchmarks and STIGs.

• Experience reviewing, developing, or customizing general security configuration baselines.

• Working knowledge of the National Vulnerability Database (NVD) and Common Vulnerabilities and Exposures (CVE).

• Experience applying NIST 800-series guidance for risk management and security control implementation, including publications such as NIST SP 800-30, 800-37, 800-53, 800-60, 800-63, 800-115, and 800-137.

• Ability to create security baselines from vendor documentation and adapt benchmarks to organizational needs.

• Ability to translate detailed technical security requirements into broader FISMA, NIST, and customer-specific compliance requirements.

• Practical understanding of information security principles, concepts, and methodologies, with the ability to apply them to defined technical challenges.

• Familiarity with networking technologies such as Cisco, Juniper, and Palo Alto; operating systems such as Windows Server and Red Hat Linux; and cloud or enterprise platforms such as AWS, Azure, Salesforce, Okta, Office 365, and ServiceNow.

• Experience with mobile technologies such as iOS or XenMobile is an advantage.

• Knowledge of automation and configuration management tools such as Ansible, Chef, or Puppet is preferred.

• Familiarity with Infrastructure as Code tools, including CloudFormation and Terraform, is desirable.

• Experience with container platforms such as OpenShift is a plus.

• Exposure to chaos engineering, blue-green deployments, and serverless technologies such as AWS Lambda, API Gateway, Step Functions, and SAM is beneficial.

• Familiarity with application performance analysis and monitoring tools, including ELK, as well as JSON and YAML.

• Strong analytical, organizational, and prioritization skills, with attention to detail and the ability to meet deadlines.

• Excellent written and verbal communication, presentation, and teamwork skills.

• Ability to obtain and maintain a Public Trust and/or Suitability/Fitness determination in accordance with customer requirements.

• Relevant certifications are preferred, including AWS Certified Solutions Architect, AWS Certified Developer, Cisco CCNA, Microsoft MCSE, Red Hat RHCSA, EBSA, or ECSS.