Junior Cybersecurity Engineer - Zero Trust & DevSecOps

tharros; Washington (District of Columbia); On-site; USD 65,000 - 90,000; Full time

Job summary

Tharros in Washington, DC, is seeking a Junior Cybersecurity Engineer to support cybersecurity engineering across enterprise audit, cloud and Zero Trust architecture, security tooling, and DevSecOps. This on-site role works in a Government SCIF and contributes to dashboards and roadmaps.

You will maintain tools like Nessus/ACAS, update STIGs, write automation scripts, and help ensure audit readiness for ICD 500-27, with opportunities to grow in Zero Trust initiatives.

Qualifications

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science OR minimum of 4 years' IT/cybersecurity experience.
• Minimum of 1 year of experience in security engineering, systems administration, or DevSecOps.
• Active Top Secret clearance with contingency on DOD CAS SCI eligibility.
• Proficiency with automation tools including Python, PowerShell, or shell scripting.
• Knowledge of DISA STIGs and configuration compliance scanning.
• Knowledge of audit logging concepts for Windows and Linux systems.
• Knowledge of Zero Trust architecture principles.
• Skill in using Nessus/ACAS or SCAP tools.
• Ability to troubleshoot tool and script issues.
• Proficient in Microsoft Office Suite to include Teams or similar tools.
• CompTIA Security+ or AWS/Azure fundamentals certification.

Responsibilities

• Support cybersecurity engineering across enterprise audit, cloud and Zero Trust architecture, security tooling, and DevSecOps.
• Maintain security tools including ACAS/Nessus, SCAP, SonarQube, and GitLab.
• Update STIGs quarterly and Nessus plug-in IDs monthly.
• Develop and troubleshoot scripts to automate STIG application and validation within the DevSecOps pipeline.
• Organize security tool data into near-real-time dashboards in the GRC or approved tool.
• Support implementation of ICD 500-27 enterprise audit requirements and build audit review dashboards with ISSOs.
• Support Zero Trust capability gap analysis, the Zero Trust roadmap, and Zero Trust dashboards.
• Maintain a tracking tool for network device end-of-life and end-of-service dates.

Education

BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science

Tools

Python

PowerShell

Shell scripting

Nessus/ACAS

SCAP

GitLab

STIGs

Audit logging

Zero Trust

Cloud security tooling

Job description

Tharros in Washington, DC, is seeking a Junior Cybersecurity Engineer to support cybersecurity engineering across enterprise audit, cloud and Zero Trust architecture, security tooling, and DevSecOps. This on-site role works in a Government SCIF and contributes to dashboards and roadmaps.

You will maintain tools like Nessus/ACAS, update STIGs, write automation scripts, and help ensure audit readiness for ICD 500-27, with opportunities to grow in Zero Trust initiatives.