Security Configuration Compliance SME

Job Title: Cyber Security Engineering IV
Work Location : Onsite in Charlotte or Detroit for Hybrid model 3 days a week
Duration : 12 + Months with possible extension

Mandatory skills : **Security Configuration Compliance SME **: **Familiarity with Qualys; **Depth of understanding in Systems Administration knowledge of Unix operating system; ** Intermediate competency writing scripts; **Must have excellent communication skills Proactive independent, self-starter independent worker who will take initiative and work well collaboratively. ** Video conference interview; provide location and best time to interview.

Job Description

Supports the configuration compliance baseline program which scans for deviations from prescribed settings in technologies such as operating systems, middleware components, databases, and network appliances.

Updates existing baseline documents annually or creates new baseline documents as required. Ensures baselines effectively secure key technologies by starting with CIS benchmarks and with subject matter experts to refine baselines.

Configures scans within the scanning tool to match the approved baseline document. Ensures these scans run regularly and distributes the results to the technology personnel who will resolve deviations. Works with technology support partners and the scanning vendor to resolve any problems with the scanning tool.

Reports on compliance adherence and spearheads governance efforts to ensure the technology personnel resolve the deviations on time, showing follow-up and escalation.

Skill/Experience/Education

Mandatory Skills

Solid working experience and knowledge of Unix operating systems, Windows OS and services to include domains/active directory/GPOs Understanding of databases, web technologies, and network devices Experience with vulnerability and/or configuration compliance scanners Strong verbal and written communications skills Intermediate competency with spreadsheets Intermediate competency writing scripts using python Able to write documentation Ability to identify and solve problems Able to organize meetings, and translate discussed decisions into actions Self-directing with sense of ownership

Desired Skills

Ability to design and document processes Ability to teach others their area or responsibility

Skill/Experience/Education

Mandatory SkillsSolid working experience and knowledge of Unix operating systems, Windows OS and services to include domains/active directory/GPOs Understanding of databases, web technologies, and network devices Experience with vulnerability and/or configuration compliance scanners Strong verbal and written communications skills Intermediate competency with spreadsheets Intermediate competency writing scripts using python Able to write documentation Ability to identify and solve problems Able to organize meetings, and translate discussed decisions into actions Self-directing with sense of ownership

Desired SkillsAbility to design and document processes Ability to teach others their area or responsibility