Junior Security Engineer

What you'll do

• Manage the full vulnerability management lifecycle including identification, analysis, remediation, and documentation.
• Perform vulnerability scanning and analyze findings using ACAS, Tenable/Nessus, or similar tools.
• Implement and validate DISA STIGs and approved security configuration baselines across infrastructure systems.
• Execute recurring security activities such as audit log reviews, account reviews, and continuous monitoring.
• Support RMF/ATO activities by preparing security documentation, control evidence, and compliance records for NIST standards.
• Monitor security logs and events using Splunk or other SIEM tools to identify and escalate issues.
• Review system and configuration changes to assess potential security impacts before implementation.
• Research security vulnerabilities and technical requirements to provide recommendations to senior personnel.

What we're looking for

• Bachelor's degree with at least 2 years of relevant experience (additional experience may be considered in lieu of a degree).
• Active TS/SCI clearance with Polygraph required, or active TS/SCI with willingness to obtain a Poly.
• U.S. Citizenship is required.
• Must meet DoD 8570.11-IAT Level II certification requirements (e.g., Security+ CE, CCNA-Security, GSEC, or SSCP).
• Experience with Windows Server, Active Directory, IIS, DNS, DHCP, Exchange, and DFS.
• Experience implementing security controls on network services and using tools like Splunk, McAfee HBSS, and ACAS.
• Experience with networking technologies, STIGs, and troubleshooting TCP/IP, internet security, and encryption.
• Ability to create technical documentation and diagrams using MS Visio, Project, Excel, and Word.
• CISSP or CASP certification (preferred).