STIGs Configuration Management Specialist

Key Responsibilities

• Customize industry standard security hardening guides / benchmarks to meet organizational requirements.
• Ensure compliance tools accurately verify endpoint configurations.

Required Qualifications

• 6-9 years of experience customizing US-DOD STIGs, CIS Benchmarks, or similar guides.
• Experience with customizing compliance verification tools like CIS-CAT and Tenable Nessus audit files is highly desirable.
• Experience in administering, or configuring operating systems (Linux and Windows), network devices, databases, and web servers.
• Ability to assess risks related to hardening standards misconfigurations.

Preferred Skills

• Strong problem-solving and analytical abilities.
• Excellent communication and teamwork skills.

Will Be Evaluated On

• Customization of configuration compliance verification tools (eg CIS cis-cat, tenable Nessus)
• Customization of Security configuration standards (like CIS benchmarks) for Operating systems (Linux), Applications (DB & web servers) & Network device configurations (FW, routers, ADCs)
• OS (Win, Linux), DBs, web servers, network devices administration
• Security risk evaluation of compliance deviations