Junior Information System Security Engineer

Astrion; Huntsville (AL); On-site; USD 90,000 - 120,000; Full time

Job summary

Astrion is seeking an Information System Security Engineer in Huntsville, AL, onsite. The role focuses on monitoring, vulnerability management, and incident response to maintain enterprise security posture. You will work with Defender, Sentinel, and Tenable tools, coordinating remediation with admins across systems.

The ideal candidate has DoD baselines, NIST/CMMC knowledge, and a strong foundation in security principles. This full-time position requires on-site work and active clearance.

Qualifications

• Active Secret clearance required.
• Bachelor's degree in Computer Science, Information Technology, or related field (or equivalent experience).
• Knowledge of NIST 800-171 and CMMC requirements.
• Active DoD 8140 compliant baseline certification (e.g., Security+ CE, CISSP).

Responsibilities

• Monitor security alerts from Defender and Sentinel and respond accordingly.
• Conduct routine vulnerability assessments using Defender, Tenable and other tools.
• Coordinate remediation with system and application owners.
• Track remediation efforts and validate vulnerability closures.
• Assist in risk-based prioritization and KPI reporting.
• Support security monitoring, threat detection and incident response.
• Investigate suspicious activity and escalate issues as needed.
• Assist with endpoint security and security controls deployment.
• Document findings and contribute to security procedures.

Skills

Active Secret clearance

Cybersecurity fundamentals

Vulnerability management

Security monitoring

Windows security

Education

Bachelor's degree in Computer Science/Information Technology or related field

Tools

Microsoft Defender

Microsoft Sentinel

Tenable Vulnerability Management

Active Directory

Microsoft 365 Security

Job description

Overview

Information System Security Engineer

LOCATION: Huntsville, AL (Onsite)

JOB STATUS: Full-time

CLEARANCE: Active Secret (Required)

TRAVEL: Less than 10%

Astrion has an exciting opportunity for an eager Information System Security Engineer to support the organization's cybersecurity and vulnerability management programs. This role works closely with system administrators, database administrators, cloud engineers, and application owners to identify, prioritize, and remediate security vulnerabilities across enterprise systems.

The ideal candidate will have foundational cybersecurity knowledge, experience with security monitoring and vulnerability management tools, and a strong desire to develop technical expertise in enterprise security operations. This position will primarily leverage Microsoft Defender, Microsoft Sentinel, and Tenable to monitor security posture, investigate risks, and coordinate remediation activities.

REQUIRED QUALIFICATIONS / SKILLS

• Active Secret clearance (required)
• Bachelor's degree in Computer Science, Information Technology, or related field (or equivalent experience)
• Knowledge of: NIST 800-171 and CMMC requirements
• Active DoD 8140 (formerly DoD 8570) compliant baseline certification (e.g., Security+ CE, CISSP)

KEY COMPETENCIES

• 3 to 5 years of experience in cybersecurity, information security, system administration, or a related technical field.
• Exposure to vulnerability management, security monitoring, or incident response activities.
• Experience working in Microsoft environments.
• Basic understanding of cybersecurity principles and controls.
• Familiarity with vulnerability management concepts and remediation practices.
• Knowledge of operating systems including Windows Server and workstation platforms.
• Experience with or exposure to: Microsoft Defender, Microsoft Sentinel, Tenable Vulnerability Management, Active Directory, Microsoft 365 Security technologies.
• Understanding of common vulnerabilities, threats, and attack techniques.
• Basic knowledge of networking concepts, protocols, and security fundamentals.
• Familiarity with security frameworks such as NIST Cybersecurity Framework or CIS Controls.

RESPONSIBILITIES

• Monitor, analyze, and respond to security alerts generated by Microsoft Defender and Microsoft Sentinel.
• Conduct routine vulnerability assessments using Defender, Tenable and other security tools.
• Review vulnerability scan results and work directly with system and application administrators to coordinate remediation activities.
• Track remediation efforts and validate closure of identified vulnerabilities.
• Assist in vulnerability prioritization using risk-based methodologies and business impact analyses.
• Support security monitoring, threat detection, and incident response activities.
• Investigate suspicious activity and security events and escalated issues as needed.
• Assist with endpoint security management using Microsoft Defender technologies.
• Develop and maintain security performance metrics, KPIs, and risk dashboards.
• Provide regular status updates to leadership regarding vulnerabilities, incidents, compliance activities, and overall system security posture.
• Identify trends and recommend strategic improvements to reduce organizational risk.
• Document security findings, remediation recommendations, and operational procedures.
• Participate in security assessments, audits, and compliance activities.
• Collaborate with infrastructure, cloud, server, networking, and application teams to improve overall security posture.
• Support implementation of security controls and best practices across enterprise systems.
• Stay informed of emerging threats, vulnerabilities, and cybersecurity trends.