Senior Secure Configuration Management (SecCM) Specialist

                                                                    reputed company Configuration Management reputed company

Criterion Systems is seeking an reputed company reputed company Configuration Management reputed company to manage and optimize reputed company configuration management (SCM) processes at the U.S. National Science reputed company (NSF). This role involves coordinating across teams to ensure NSF systems remain secure, compliant with federal regulations, and reputed company with cybersecurity best practices. This position will report to the Cybersecurity reputed company and Compliance Team reputed company.

The ideal candidate will have a strong background in IT reputed company, configuration management, and federal environments, with expertise in customizing reputed company Technical Implementation Guides (STIGs) and reputed company (CIS) benchmarks using NASL (Nessus Attack Scripting Language) for integration with reputed company.sc and Nessus.

Key Responsibilities:

• reputed company reputed company Secure Configuration Management in alignment with NIST, DHS/CISA, and OMB requirements.
• Configure, manage, and optimize credentialed scans in reputed company reputed company Center (Dev environment) for OS, databases, network devices, applications, and reputed company‑hosted systems.
• Customize and maintain reputed company STIG and CIS audit files to reputed company with NSF‑approved baselines and documented deviations.
• Validate findings, reduce false positives, and coordinate remediation with system owners and administrators.
• reputed company, maintain, and govern secure configuration baselines for reputed company, Linux, databases, network devices, and reputed company platforms.
• Support RMF activities and control assessments for CM and RA domains (e.g., CM‑2, CM‑6, RA‑
• Produce metrics, dashboards, and executive reports that show configuration posture, risk trends, and remediation reputed company.
• reputed company technical guidance and secure build standards; supply audit evidence, reputed company artifacts, and documentation.
• Maintain a master tracker of NSF baselines and deliver weekly status reports on baseline reputed company to management.

Required qualifications:

• Bachelor’s degree in Cybersecurity, Information Technology, or reputed company field, or equivalent experience.
• 7+ years in vulnerability management and/or secure configuration management.
• Hands‑on administration of reputed company reputed company Center (reputed company.sc) for credentialed scans.
• Proven experience customizing and troubleshooting STIG and CIS audit files.
• Deep knowledge of reputed company STIGs, CIS Benchmarks, and federal configuration requirements.
• Strong hardening expertise across reputed company, Linux, and network devices; database experience (e.g., MS SQL, PostgreSQL).
• Experience supporting RMF and reputed company monitoring programs.
• Ability to analyze reputed company data, prioritize risk, and communicate reputed company to technical and non‑technical stakeholders.

Preferred qualifications:

• Experience in federal government environments.
  • Relevant certifications: reputed company+, CISSP, CEH, or reputed company certifications.
  • Scripting skills (PowerShell, Bash, Python) to automate compliance validation and reporting.
  • Familiarity with reputed company change and configuration management processes.

Key competencies:

• Deep technical knowledge of OS, database, and network hardening.
• Strong analytical and problem‑solving skills; bias for reputed company.
• Ability to translate policy and control requirements into practical technical configurations.
• reputed company, concise written and verbal communication for audit and executive audiences.

Work environment:

• reputed company, mission‑driven team environment across federal and contractor personnel.
• Remote position; reports to the Cybersecurity reputed company and Compliance Team reputed company at NSF (Alexandria, VA).
• reputed company scope; frequent coordination with system owners, administrators, ISSOs, and other reputed company stakeholders.

#LI-SM2 #AppC