Junior Cybersecurity Engineer

tharros; Washington (District of Columbia); Vor Ort; USD 65.000 - 90.000; Vollzeit

Zusammenfassung

Tharros in Washington, DC, is seeking a Junior Cybersecurity Engineer to support cybersecurity engineering across enterprise audit, cloud and Zero Trust architecture, security tooling, and DevSecOps. This on-site role works in a Government SCIF and contributes to dashboards and roadmaps.

You will maintain tools like Nessus/ACAS, update STIGs, write automation scripts, and help ensure audit readiness for ICD 500-27, with opportunities to grow in Zero Trust initiatives.

Qualifikationen

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science OR minimum of 4 years' IT/cybersecurity experience.
• Minimum of 1 year of experience in security engineering, systems administration, or DevSecOps.
• Active Top Secret clearance with contingency on DOD CAS SCI eligibility.
• Proficiency with automation tools including Python, PowerShell, or shell scripting.
• Knowledge of DISA STIGs and configuration compliance scanning.
• Knowledge of audit logging concepts for Windows and Linux systems.
• Knowledge of Zero Trust architecture principles.
• Skill in using Nessus/ACAS or SCAP tools.
• Ability to troubleshoot tool and script issues.
• Proficient in Microsoft Office Suite to include Teams or similar tools.
• CompTIA Security+ or AWS/Azure fundamentals certification.

Aufgaben

• Support cybersecurity engineering across enterprise audit, cloud and Zero Trust architecture, security tooling, and DevSecOps.
• Maintain security tools including ACAS/Nessus, SCAP, SonarQube, and GitLab.
• Update STIGs quarterly and Nessus plug-in IDs monthly.
• Develop and troubleshoot scripts to automate STIG application and validation within the DevSecOps pipeline.
• Organize security tool data into near-real-time dashboards in the GRC or approved tool.
• Support implementation of ICD 500-27 enterprise audit requirements and build audit review dashboards with ISSOs.
• Support Zero Trust capability gap analysis, the Zero Trust roadmap, and Zero Trust dashboards.
• Maintain a tracking tool for network device end-of-life and end-of-service dates.

Ausbildung

BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science

Tools

Python

PowerShell

Shell scripting

Nessus/ACAS

SCAP

GitLab

STIGs

Audit logging

Zero Trust

Cloud security tooling

Jobbeschreibung

Tharros supports the Department of Homeland Security (DHS) with cybersecurity services across its Intelligence Enterprise. In support of this mission, we have an immediate opportunity for a Junior Cybersecurity Engineer.

In this role you will support cybersecurity engineering across enterprise audit, cloud and Zero Trust architecture, security tooling, and DevSecOps. You will maintain security tools, automate STIG compliance, and help build the dashboards and Zero Trust roadmap the enterprise relies on. This position is on-site in a Government SCIF in Washington, DC.

Maintain and update cybersecurity tools including ACAS/Nessus, SCAP, SonarQube, and GitLab.

• Update Security Technical Implementation Guides (STIGs) quarterly and Nessus plug-in IDs monthly.
• Develop and troubleshoot scripts that automate STIG application and validation within the DevSecOps pipeline.
• Organize security tool data into near-real-time dashboards in the GRC or approved tool.
• Support implementation of ICD 500-27 enterprise audit requirements and build audit review dashboards with ISSOs.
• Support Zero Trust capability gap analysis, the Zero Trust roadmap, and Zero Trust dashboards.
• Maintain a tracking tool for network device end-of-life and end-of-service dates.

Requirements:

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science OR minimum of 4 years' experience in IT or cybersecurity.
• Minimum of 1 year of experience in security engineering, systems administration, or DevSecOps.
• Active Top Secret clearance with contingency on DOD CAS granting SCI eligibility.
• Proficiency with automation tools to include but not limited to Python, PowerShell, or shell scripting languages.
• Knowledge of DISA STIGs and configuration compliance scanning.
• Knowledge of audit logging concepts for Windows and Linux systems.
• Knowledge of Zero Trust architecture principles.
• Skill in using Nessus/ACAS or SCAP tools.
• Ability to troubleshoot tool and script issues.
• Proficient in Microsoft Office Suite to include Teams or similar workplace chat and videoconferencing tools.
• Excellent written and oral communications skills.
• CompTIA Security+ or an AWS/Azure fundamentals certification.