Configuration Hardening Specialist

• Define / customize configuration hardening documents, similar to CIS benchmarks or DOD STIGS, for technologies such as Linux, Windows, Databases, Network devices, web servers and many others.
• Customize compliance hardening verification tools to align with the company’s official configuration hardening documents.
• Scan Swift systems to determine their compliance levels against the defined configuration hardening documents.
• Analyze configuration hardening deviation requests and advise customers on proper mitigation and remediation steps.
• Identify and automate repetitive and manual tasks in the day-to-day operations.
• Identify, document and implement process improvements.

• Experience with technologies such as Windows, Linux, Web Servers, Databases, Kubernetes, AWS, Network Devices.
• Experience with Center for Internet Security (CIS) benchmarks / DOD STIGs and CIS tools such as CIS CAT-pro.
• Experience with Tenable Nessus, including development/customization of compliance audit files.
• Experience in risk analysis of identified deviations to security related controls.
• Minimum of 2 years of relevant work experience.
• Excellent written, presentation and communication skills
• Analytical problem solving and investigation approach.
• Autonomous, driven, with strong ability to quickly adapt and respond to changing priorities.
• Customer oriented, driven by high quality and result based mindset.
• Team player – gaining energy through collaboration with others.

Demonstrates expertise in configuration hardening for various technologies, including Windows, Linux, and Databases, while ensuring compliance with CIS benchmarks and DOD STIGs. Proficient in risk analysis and process improvement, with a strong focus on automation and customer-oriented solutions.

• Configuration Hardening
• CIS Benchmarks
• DOD STIGs
• Tenable Nessus
• Risk Analysis

• Linux
• Windows
• Web Servers
• Databases
• Kubernetes
• AWS
• CIS CAT-pro
• Compliance Audit Development
• Configuration Verification
• Process Improvement

• Excellent Communication Skills
• Analytical Problem Solving
• Autonomous
• Customer Oriented
• Team Player

• Configuration Hardening Documents
• Compliance Levels
• Security Controls
• Deviation Requests
• Mitigation Steps

• CIS CAT-pro
• Tenable Nessus
• Compliance Verification Tools
• Automation Tools