Security Baselines Architect

We are seeking an experienced Security Baselines Architect – Senior Associate to join a major cybersecurity architecture and governance program within a highly regulated enterprise environment. The successful candidate will be responsible for developing, maintaining, and enforcing Minimum Security Baselines (MSBs), system hardening standards, and configuration compliance controls across enterprise infrastructure, cloud platforms, databases, operating systems, and security technologies. This role plays a critical part in improving the organization's security posture through secure configuration management, compliance monitoring, and continuous security improvement. Key Responsibilities • Develop and maintain enterprise Minimum Security Baselines (MSBs) and hardening standards. • Define secure configuration standards for: • Windows Servers and Workstations • Linux Operating Systems • Network Devices (Firewalls, Routers, Switches) • Databases • Cloud Platforms • Security Technologies • Establish and maintain security hardening requirements aligned with industry best practices. • Perform baseline gap assessments and configuration reviews across enterprise environments. • Conduct configuration compliance assessments and identify deviations from approved baselines. • Monitor configuration drift and coordinate remediation activities with technical teams. • Review system and platform configurations against security standards and approved baselines. • Leverage CIS Benchmarks, DISA STIGs, and vendor security configuration guidelines to define security requirements. • Collaborate with infrastructure, cloud, network, security, and architecture teams to implement secure configurations. • Support security audits, compliance initiatives, and cybersecurity assessments. • Develop documentation, guidelines, and procedures related to enterprise hardening standards. • Contribute to security architecture reviews and cybersecurity governance activities. Required Qualifications • Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related discipline. • Strong experience developing and maintaining Minimum Security Baselines (MSBs). • Hands-on experience creating and implementing system hardening standards. • Strong knowledge of: • CIS Benchmarks • DISA STIGs • Vendor Security Configuration Standards • Security Hardening Frameworks • Configuration Compliance Management • Experience securing: • Windows Environments • Linux Environments • Network Infrastructure • Databases • Cloud Platforms • Security Technologies • Experience conducting: • Security Gap Assessments • Baseline Compliance Reviews • Configuration Drift Analysis • Remediation Tracking • Strong understanding of cybersecurity architecture and security governance principles. Preferred Certifications • CISSP (Certified Information Systems Security Professional) • GSEC (GIAC Security Essentials Certification) Preferred Experience • Experience within banking, financial services, government, or other highly regulated environments. • Experience implementing CIS Benchmark-based hardening programs. • Experience working with DISA STIG implementation and compliance activities. • Familiarity with cloud security best practices and enterprise security architecture. • Experience supporting large-scale cybersecurity transformation and governance initiatives. Contract duration: 12 Month Contract

Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related discipline. Strong experience developing and maintaining Minimum Security Baselines (MSBs). Hands-on experience creating and implementing system hardening standards. Strong knowledge of: CIS Benchmarks, DISA STIGs, Vendor Security Configuration Standards, Security Hardening Frameworks, Configuration Compliance Management. Experience securing Windows Environments, Linux Environments, Network Infrastructure, Databases, Cloud Platforms, Security Technologies. Experience conducting Security Gap Assessments, Baseline Compliance Reviews, Configuration Drift Analysis, Remediation Tracking. Strong understanding of cybersecurity architecture and security governance principles.

Develop and maintain enterprise Minimum Security Baselines (MSBs) and hardening standards. Define secure configuration standards for Windows Servers and Workstations, Linux Operating Systems, Network Devices (Firewalls, Routers, Switches), Databases, Cloud Platforms, Security Technologies. Establish and maintain security hardening requirements aligned with industry best practices. Perform baseline gap assessments and configuration reviews across enterprise environments. Conduct configuration compliance assessments and identify deviations from approved baselines. Monitor configuration drift and coordinate remediation activities with technical teams. Review system and platform configurations against security standards and approved baselines. Leverage CIS Benchmarks, DISA STIGs, and vendor security configuration guidelines to define security requirements. Collaborate with infrastructure, cloud, network, security, and architecture teams to implement secure configurations. Support security audits, compliance initiatives, and cybersecurity assessments. Develop documentation, guidelines, and procedures related to enterprise hardening standards. Contribute to security architecture reviews and cybersecurity governance activities.