Junior Security Engineer

Jimmy Jazz; Washington (District of Columbia); On-site; USD 90,000 - 130,000; Full time

Job summary

Tharros, supporting DHS cybersecurity services, seeks a Junior Security Engineer for on-site work in a Government SCIF in Washington, DC. You will maintain and automate security tools, support Zero Trust activities, and develop dashboards and audit capabilities.

You will work with Nessus/ACAS, STIG updates, and DevSecOps pipelines while coordinating with ISSOs and security teams in a fast-paced mission environment.

Qualifications

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science or 4+ years in IT/cybersecurity.
• At least 1 year of experience in security engineering, systems administration, or DevSecOps.
• Active TS/SCI clearance and U.S. citizenship; willing to undergo a DHS polygraph.
• Proficiency with automation tools such as Python, PowerShell, or shell scripting.
• Knowledge of DISA STIGs and configuration compliance scanning.
• Knowledge of Windows and Linux audit logging concepts.
• Knowledge of Zero Trust architecture principles.
• Skilled with Nessus/ACAS or SCAP tools.
• Ability to troubleshoot tool and script issues.
• Proficient with Microsoft Office Suite, including Teams.
• CompTIA Security+ or AWS/Azure fundamentals cert.
• Experience with GitLab CI/CD or Splunk.

Responsibilities

• Maintain and update cybersecurity tools like ACAS/Nessus, SCAP, SonarQube, and GitLab.
• Update STIGs quarterly and Nessus plug-in IDs monthly.
• Develop and troubleshoot scripts to automate STIGs in the DevSecOps pipeline.
• Organize security data into near-real-time dashboards in GRC or approved tool.
• Support IPS 500-27 audit requirements and build audit dashboards with ISSOs.
• Support Zero Trust capability gap analysis, roadmap, and dashboards.
• Maintain tracking for network device end-of-life and end-of-service dates.

Skills

Python

PowerShell

Shell scripting

Zero Trust

Nessus/ACAS

SCAP tools

GitLab CI/CD

Splunk

DevSecOps

Windows/Linux auditing

DISA STIGs

Troubleshooting

Office 365 Teams

Education

BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science

Tools

Nessus/ACAS

SCAP tools

GitLab CI/CD

Splunk

Job description

• Location 1790 Ash Street Southeast,Washington, DC, 20032,United States
• Employee Type Regular Full-Time
• Required Degree 4 Year Degree

Contact information

• Name Talent Acquistion
• Email [e-mail]

Description

Tharros supports the Department of Homeland Security (DHS) with cybersecurity services across its Intelligence Enterprise. In support of this mission, we have an immediate opportunity for a Junior Security Engineer.

In this role you will support cybersecurity engineering across enterprise audit, cloud and Zero Trust architecture, security tooling, and DevSecOps. You will maintain security tools, automate STIG compliance, and help build the dashboards and Zero Trust roadmap the enterprise relies on. This position is on-site in a Government SCIF in Washington, DC.

• Maintain and update cybersecurity tools including ACAS/Nessus, SCAP, SonarQube, and GitLab.
• Update Security Technical Implementation Guides (STIGs) quarterly and Nessus plug-in IDs monthly.
• Develop and troubleshoot scripts that automate STIG application and validation within the DevSecOps pipeline.
• Organize security tool data into near-real-time dashboards in the GRC or approved tool.
• Support implementation of IPS 500-27 enterprise audit requirements and build audit review dashboards with ISSOs.
• Support Zero Trust capability gap analysis, the Zero Trust roadmap, and Zero Trust dashboards.
• Maintain a tracking tool for network device end-of-life and end-of-service dates.

Requirements

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science OR minimum of 4 years' experience in IT or cybersecurity.
• Minimum of 1 year of experience in security engineering, systems administration, or DevSecOps.
• Active TS/SCI clearance and U.S. citizenship; willingness to undergo a DHS counterintelligence-scope polygraph.
• Proficiency with automation tools to include but not limited to Python, PowerShell, or shell scripting languages.
• Knowledge of DISA STIGs and configuration compliance scanning.
• Knowledge of audit logging concepts for Windows and Linux systems.
• Knowledge of Zero Trust architecture principles.
• Skill in using Nessus/ACAS or SCAP tools.
• Ability to troubleshoot tool and script issues.
• Proficient in Microsoft Office Suite to include Teams or similar workplace chat and videoconferencing tools.
• Excellent written and oral communications skills.
• CompTIA Security+ or an AWS/Azure fundamentals certification.
• Experience with GitLab CI/CD or Splunk.

Summary

Tharros combines extensive cyber defense knowledge with the world’s preeminent vulnerability expertise to identify and defend against attacks before they become problems. Working at mission speed, we harden mission systems faster and secure them for longer, so agencies never lose the mission edge. Tharros lifts the veil of enterprise cybersecurity to detect zero days before they affect you, enabling mission maneuverability and the confidence to move missions forward.

In the ever-evolving realm of cyberspace, we are dedicated to becoming the paramount defender in the 5th warfighting domain. By pioneering innovative security solutions and fostering an environment of continuous learning and vigilance, we aim to protect the interests of our nation’s security. Our commitment to excellence in cybersecurity will establish new benchmarks, transforming the digital landscape into a secure and thriving frontier for future generations.

Tharros. See Everything. Secure Anything.

Tharros is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer and make employment decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected status.