• Hands-on experience developing and maintaining CIS Security Baselines for server operating systems
• Strong expertise in Windows Server Security Configuration, including GPO-based enforcement
• Strong Linux Security Hardening experience, particularly Red Hat Enterprise Linux (RHEL)
• Experience integrating security baselines into server images and standardized builds
• Experience creating, maintaining, and implementing hardened server images aligned with CIS benchmarks
• Ability to collaborate effectively with Security, Infrastructure, and Engineering teams
• Strong documentation, communication, and organizational skills
Key Responsibilities:
• Develop and maintain CIS security baselines for Windows Server 2025 and RHEL
• Design and maintain secure, standardized (gold) server operating system images
• Translate CIS benchmarks into GPOs, local security policies, and configuration standards
• Collaborate with CSOC and IT Infrastructure teams to validate and maintain security posture
• Support vulnerability remediation, compliance initiatives, and security governance requirements
• Manage baseline exceptions, risk decisions, and compensating controls documentation
• Maintain versioned baseline artifacts, approval records, and operational documentation
Preferred Qualifications:
• Experience supporting CIS baselines in government, regulated, or large enterprise environments
• Prior experience working closely with a Cyber Security Operations Center (CSOC)
• Familiarity with vulnerability management, configuration compliance, and audit activities
• Experience supporting multiple server OS versions and lifecycle transitions
Deliverables & Success Measures:
• Approved and versioned CIS baselines for supported server operating systems
• Secure and standardized server images aligned with current CIS benchmarks
• Documented baseline updates and exception decisions
• Improved security posture and consistency across enterprise server platforms
--
Thanks & Regards
LinkedIn Group: https://www.linkedin.com/groups/10421204/
LinkedIn: https://www.linkedin.com/in/sekhar-u-27b11a166/