FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in creating and modifying security baselines using CIS Benchmarks and DISA STIGs, while ensuring compliance with NIST 800-53 and FISMA requirements. Proficient in utilizing Tenable compliance scans and maintaining alignment of security configurations across various technologies.
Highest-signal resume keywords
CIS Benchmark CreationNIST 800-53 ComplianceTenable Compliance ScansSecurity Baseline DevelopmentAutomation Tools Experience
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security Configuration BaselinesCIS BenchmarksDISA STIGsNIST 800 Special PublicationNVD KnowledgeCVE KnowledgeScripting in BashPowerShellPythonJSON or YAML
Soft Skills
CommunicationNegotiationDocumentation
Tools & Technologies
TenableAnsibleChefPuppetCloudFormationTerraformOpenShiftAWS LambdaAPI GatewayStep Functions
Certifications & Qualifications
AWS Certified Solutions ArchitectAWS Certified DeveloperCCNAMCSERHCSACompTIAISACAISC2
Industry Keywords
FISMAComplianceSecurity InvestigationPublic Trust ClearanceU.S. Citizenship
Tech Stack
Tools & technologiesAnsibleAWSChefCloudOpenShiftPuppetPythonTerraform
About the role
Key responsibilities & impact- Create security configuration baselines using CIS Benchmarks and DISA STIGs
- Modify CIS and STIG benchmarks to meet organizational requirements
- Work with system teams to negotiate and document deviations and justifications
- Develop new baselines from vendor documentation where no benchmark exists
- Translate low-level baseline settings into FISMA, NIST 800-53, and client-specific security requirements
- Apply NVD and CVE information to keep baselines current with emerging vulnerabilities
- Run Tenable compliance scans to assess systems against existing baselines
- Reconcile scan findings with system owners and keep baseline and scan results aligned
- Build baselines for servers, network devices, cloud and SaaS services, and mobile technologies
- Own assigned baselines independently and communicate status, deviations, and risks
- Review and customize general security configuration baselines and support rollout across the environment
- Learn new technologies from vendor documentation
Requirements
What you’ll need- 5+ years of experience providing support to Information Technology (IT) operations
- Experience creating security baselines using CIS and STIG benchmarks
- Experience reviewing, developing, or customizing general security configuration baselines
- Knowledge of NIST 800 Special Publication series guidance, including 800-30, 800-37, 800-53, 800-60, 800-63, 800-115, or 800-137
- Knowledge of the National Vulnerability Database (NVD) and Common Vulnerabilities and Exposures (CVE)
- Ability to create security baselines from scratch using vendor documentation
- Ability to modify CIS and STIG benchmarks to meet organizational requirements
- Ability to translate low-level security baseline requirements into high-level FISMA, NIST, and client-specific security requirements
- Experience verifying baselines with Tenable compliance scans, including custom audit files (preferred)
- Experience with networking, operating systems, cloud services, or mobile technologies (preferred)
- Experience with automation tools including Ansible, Chef, or Puppet (preferred)
- Experience with Infrastructure-as-Code tools including CloudFormation or Terraform (preferred)
- Experience with container platforms including OpenShift (preferred)
- Experience with chaos engineering and blue/green deployments (preferred)
- Experience with serverless technologies including AWS Lambda, API Gateway, Step Functions, and SAM (preferred)
- Experience with JSON or YAML and scripting in bash, PowerShell, or Python (preferred)
- AWS Certified Solutions Architect, AWS Certified Developer, CCNA, MCSE, RHCSA, CompTIA, ISACA, or ISC2 certification (preferred or a plus)
- High school diploma or GED required
- Public Trust / Suitability clearance; applicants selected will be subject to a security investigation
- Must be a U.S. Citizen
- Ability to work core hours approximately 7:30 AM–4:30 PM US Eastern Time, Monday through Friday, with an 8:30 AM ET daily team meeting
Benefits
Comp & perks- Medical Insurance
- Dental Insurance
- Vision Insurance
- Life Insurance
- Short Term & Long Term Disability
- 401k Retirement Savings Plan with Company Match
- Paid Holidays
- Paid Time Off (PTO)
- Tuition and Professional Development Assistance
- Flexible schedule with advance notice
- Minimal travel