Job Type
Full-time
Description
MBL Technologies is seeking an experienced
Baseline Security Engineer, Senior to support cybersecurity engineering, vulnerability management, and compliance initiatives for a federal government customer. The successful candidate will develop, implement, and maintain enterprise security baselines using CIS Benchmarks, DISA STIGs, and NIST guidance.
The ideal candidate will possess experience developing secure configuration standards, supporting compliance initiatives, and translating technical security requirements into actionable controls that strengthen enterprise security posture.
This role supports a federal customer and requires the ability to obtain and maintain a Public Trust. Key Responsibilities: - Create and maintain security baselines utilizing CIS Benchmarks and DISA STIGs.
- Review, develop, and customize security configuration standards for enterprise technologies.
- Support vulnerability management and remediation initiatives.
- Research and analyze security vulnerabilities using NVD and CVE resources.
- Develop baseline configurations using vendor documentation and security guidance.
- Translate technical requirements into FISMA, NIST, and client-specific compliance requirements.
- Support assessment, authorization, and continuous monitoring activities.
- Work closely with engineering, operations, and cybersecurity teams to implement secure configurations.
- Develop technical documentation, security standards, and configuration guidance.
- Support audit readiness and compliance reporting efforts.
Required Experience Skills & Qualifications: - 5+ years of experience supporting Information Technology operations.
- Experience creating security baselines using CIS and STIG benchmarks.
- Experience reviewing, developing, or customizing general security configuration baselines.
- Knowledge of NIST Special Publication guidance including 800-30, 800-37, 800-53, 800-60, 800-63, 800-115, and 800-137.
- Knowledge of the National Vulnerability Database (NVD) and Common Vulnerabilities and Exposures (CVE).
- Ability to create security baselines from scratch using vendor documentation.
- Ability to modify CIS and STIG benchmarks to meet organizational requirements.
- Ability to translate low-level security requirements into high-level FISMA, NIST, and client-specific requirements.
- Ability to obtain and maintain a Public Trust or Suitability/Fitness determination.
- High School Diploma or GED.
Preferred Qualifications: - Experience with Cisco, Juniper, Palo Alto, Windows Server, Red Hat, Linux, AWS, Azure, Salesforce, Okta, Microsoft 365, or ServiceNow.
- Experience designing and implementing automation tools including Ansible, Chef, or Puppet.
- Experience with Infrastructure-as-Code technologies including Terraform or CloudFormation.
- Experience with OpenShift and containerized environments.
- Experience with chaos engineering and blue/green deployments.
- Experience with serverless technologies including Lambda, API Gateway, Step Functions, and SAM.
- Experience with application performance monitoring and analysis platforms including ELK.
- Experience with JSON or YAML programming.
- Bachelor's Degree.
- AWS Certified Solutions Architect, AWS Certified Developer, CCNA, MCSE, RHCSA, EBSA, ECSS, or similar certifications.
MILITARY OCCUPATIONAL SPECIALTY CODES (MOS codes): 170A, 170D, 17A, 17B, 17C, 17D, 24B, 25B, 47D, 94F, IT, 17 5309, 6203, 9735, 9740, 9890, 9891
Benefits: MBL Technologies offers a competitive salary adjusted for candidate qualifications partnered with an industry-leading benefits package. This package includes incentive plans with corporate and individual-based performance bonuses, 401K, PTO, remote work, health and wellness programs, employee discounts, and learning and development reimbursement.
