Baseline Security Engineer, Senior

Description

MBL Technologies, Inc. offers a diverse set of management and technology consulting services to Federal government and commercial markets. Our solutions are tailored to support each client’s mission, accounting for their unique needs and operating environments to ensure success. We bring the right people, capabilities, and expertise together to assist our clients with enabling their mission. Together our individual differences drive successful business results.

If you are transitioning from military to civilian life, have prior service, are a retired veteran, or a member of the National Guard or Reserves, or spouse of an active military service member, we encourage you to apply. Please visit our webpage for information on our policies and benefits for the military and veteran community.

Why Work with Us?

• Make an Impact: Work on meaningful projects that support critical missions and drive innovation.
• Invest in Your Future: Competitive benefits, 401(k) match, and professional development opportunities.
• Be Part of Something Bigger: Join a collaborative team that values community engagement, volunteerism, and employee connection.

MBL Technologies is seeking an experienced Baseline Security Engineer, Senior to support cybersecurity engineering, vulnerability management, and compliance initiatives for a federal government customer. The successful candidate will develop, implement, and maintain enterprise security baselines using CIS Benchmarks, DISA STIGs, and NIST guidance.
The ideal candidate will possess experience developing secure configuration standards, supporting compliance initiatives, and translating technical security requirements into actionable controls that strengthen enterprise security posture. 

This role supports a federal customer and requires the ability to obtain and maintain a Public Trust.

Key Responsibilities:

• Create and maintain security baselines utilizing CIS Benchmarks and DISA STIGs.
• Review, develop, and customize security configuration standards for enterprise technologies.
• Support vulnerability management and remediation initiatives.
• Research and analyze security vulnerabilities using NVD and CVE resources.
• Develop baseline configurations using vendor documentation and security guidance.
• Translate technical requirements into FISMA, NIST, and client-specific compliance requirements.
• Support assessment, authorization, and continuous monitoring activities.
• Work closely with engineering, operations, and cybersecurity teams to implement secure configurations.
• Develop technical documentation, security standards, and configuration guidance.
• Support audit readiness and compliance reporting efforts.

Required Experience Skills & Qualifications: 

• 5+ years of experience supporting Information Technology operations.
• Experience creating security baselines using CIS and STIG benchmarks.
• Experience reviewing, developing, or customizing general security configuration baselines.
• Knowledge of NIST Special Publication guidance including 800-30, 800-37, 800-53, 800-60, 800-63, 800-115, and 800-137.
• Knowledge of the National Vulnerability Database (NVD) and Common Vulnerabilities and Exposures (CVE).
• Ability to create security baselines from scratch using vendor documentation.
• Ability to modify CIS and STIG benchmarks to meet organizational requirements.
• Ability to translate low-level security requirements into high-level FISMA, NIST, and client-specific requirements.
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination.
• High School Diploma or GED.

Preferred Qualifications:

• Experience with Cisco, Juniper, Palo Alto, Windows Server, Red Hat, Linux, AWS, Azure, Salesforce, Okta, Microsoft 365, or ServiceNow.
• Experience designing and implementing automation tools including Ansible, Chef, or Puppet.
• Experience with Infrastructure-as-Code technologies including Terraform or CloudFormation.
• Experience with OpenShift and containerized environments.
• Experience with chaos engineering and blue/green deployments.
• Experience with serverless technologies including Lambda, API Gateway, Step Functions, and SAM.
• Experience with application performance monitoring and analysis platforms including ELK.
• Experience with JSON or YAML programming.
• Bachelor's Degree.
• AWS Certified Solutions Architect, AWS Certified Developer, CCNA, MCSE, RHCSA, EBSA, ECSS, or similar certifications.

MILITARY OCCUPATIONAL SPECIALTY CODES (MOS codes):

170A, 170D, 17A, 17B, 17C, 17D, 24B, 25B, 47D, 94F, IT, 17 5309, 6203, 9735, 9740, 9890, 9891    

CORPORATE CITIZEN:

MBL Technologies’ vision is to make a positive difference – for our people, our customers, and our communities. As such, a commitment to service and excellence has been woven into the very fabric of our culture. MBL employees demonstrate a willingness to consistently go above and beyond and strive for excellence in all we do – championing, protecting, and celebrating the core business through the mission, vision, and values. All are expected to be good corporate citizens, supporting one another and internal corporate initiatives to build a stable business platform and ensure lasting company success.

Benefits:

MBL Technologies offers a competitive salary adjusted for candidate qualifications partnered with an industry-leading benefits package. This package includes incentive plans with corporate and individual-based performance bonuses, 401K, PTO, remote work, health and wellness programs, employee discounts, and learning and development reimbursement.

EEO STATEMENT:

MBL Technologies is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, or protected veteran status.