Windows/Linux Platform Security Engineer

Luna Data is seeking a Windows/Linux Platform Security Engineer for an onsite long term contract opportunity in Austin.

100% onsite in South Austin

12 months initially, should extend 12 months at a time

• Responsible for designing, maintaining, and implementing Center for Internet Security (CIS)–aligned security baselines and hardened server images for enterprise server operating systems.
• This role focuses on modern server platforms including Windows Server 2025 and Red Hat Enterprise Linux (RHEL).
• The position works closely with Cyber Security Operations Center (CSOC) and multiple ITD infrastructure and engineering teams to ensure CIS benchmarks, security baselines, and gold images remain current, approved, and aligned with internal required security posture.
• The role ensures that server operating system images reflect approved security controls while remaining operationally supportable.

Primary Responsibilities

CIS Baseline Development & Maintenance

• Create, customize, and maintain CIS security baselines for: Windows Server 2025 and Red Hat Enterprise Linux (RHEL).
• Monitor CIS benchmark releases and security advisories to ensure baselines are reviewed and updated as required.
• Translate CIS benchmarks into: Group Policy Objects (GPOs), Local security policies, Configuration standards and baseline documentation.
• Maintain versioned baseline artifacts, approval records, and supporting documentation.

Server Image Hardening & Standardization

• Design and maintain secure, standardized (“gold”) server operating system images that incorporate approved CIS baselines.
• Integrate CIS baseline controls into: Server build images, Post-build configuration processes
• Validate that baseline settings are consistently applied across newly deployed server systems.
• Support image updates as new operating system releases or CIS benchmark versions are published.

Security Alignment & CSOC Collaboration

• Work closely with CSOC & SRM to: Review baseline changes, Validate security posture ,Address findings related to configuration standards and benchmarks.
• Participate in security, baseline review, and posture validation meetings with CSOC.
• Ensure CIS baseline decisions align with internal STS security governance and risk management expectations.

Cross-Team Coordination

• Collaborate with ITD teams including: Server Operations, Platform Engineering, Change Management, Vulnerability Management.
• Provide guidance on baseline impacts to operations and applications.
• Support discussions related to baseline compliance, remediation strategy, and future platform alignment.

Exception & Risk Management Support

• Identify scenarios where CIS baseline settings require exceptions due to operational or application constraints.
• Support documentation of: Risk decisions, Approved exceptions, Compensating controls.
• Maintain baseline exception artifacts in alignment with security governance processes.

Required Qualifications

• Hands-on experience developing and maintaining CIS security baselines for server operating systems.
• Strong knowledge of: Windows Server security configuration (including GPO-based enforcement) and Linux security hardening, particularly RHEL.
• Experience integrating security baselines into server images or standardized builds.
• Ability to work cross-functionally with security and infrastructure teams.
• Strong documentation, communication, and organizational skills.

Preferred Qualifications

• Experience supporting CIS baselines in a government, regulated, or large enterprise environment.
• Prior experience collaborating directly with a Cyber Security Operations Center (CSOC).
• Familiarity with vulnerability management, configuration compliance, or audit activities.
• Experience supporting multiple server OS versions and lifecycle transitions.

Deliverables & Success Measures

• Approved, versioned CIS baselines for supported server operating systems.
• Secure, standardized server OS images reflecting current CIS benchmarks.
• Documented baseline updates and exception decisions aligned with CSOC and ITD standards.
• Improved consistency and security posture across enterprise server platforms.

What Luna Data Offers

• Competitive compensation and benefits, including health, dental, vision, life, accident, and disability insurance.
• Great work-life balance.
• Work on high profile projects.

This is a contract opportunity based in Austin, TX and no sponsorship can be provided. Luna Data Solutions, Inc. provides equal employment opportunities to all employees. All applicants will be considered for employment and prohibits discrimination and harassment of any type without regard to age, race, color, religion, sexual orientation, gender identity, sex, national origin, genetics, protected veteran status, and/or disability status.