Junior Security Engineer - San Antonio, TX

MAXISIQ, Inc.; San Antonio (TX); Hybrid; USD 140,000 - 160,000; Full time

Job summary

MAXISIQ, Inc. in San Antonio, TX, is seeking a Junior Security Engineer to support DoD RMF and ICD 503 requirements, focusing on system hardening, automation, and vulnerability remediation across Windows, Linux, and containerized environments.

This role emphasizes inline security within CI/CD and collaboration with development teams. The position offers a hybrid work model, with potential locations in San Antonio and adjacent military areas, and requires hands-on experience with automation

Qualifications

• 5+ years as an Information Systems Security Engineer or Security Engineer with RMF experience.
• Working knowledge of cybersecurity tools such as ACAS, DISA STIGs/SCAPs/CIS Benchmarks.
• Hands-on experience with vulnerability management and remediation across multiple operating systems.
• Proficiency with automation tools (Ansible) and scripting (Python/Bash).
• Working knowledge of virtualization platforms (VMware/ESXi) and container technologies (Docker).
• Familiarity with network device hardening and STIG implementation for Cisco and Juniper platforms.
• Experience applying DISA STIGs, SCAPs, and CIS Benchmarks.
• Top Secret/SCI Security Clearance.
• Bachelor’s degree from an accredited college or university.
• Security Architect certifications IAW DoD Directive 8140.01 (e.g., CompTIA CASP, Cisco CCSP, SANS GSEC).

Responsibilities

• Assist developing layered protections and establish cybersecurity SOPs or guidelines for authorization boundaries.
• Perform vulnerability management and implement fix actions across Windows, Linux/Unix, and containerized environments.
• Engineer and automate and deploy security remediation configurations using tools such as Ansible and scripting in Python and Bash.
• Implement and maintain DISA STIGs and CIS Benchmarks across diverse platforms, including RHEL, Ubuntu, Windows operating systems, VMware/ESXi, and 3rd-party applications, as well as network devices such as Cisco (NXOS, ASRs, IOS-XE, ASA) and Juniper.
• Support container security engineering with Docker and related technologies.
• Conduct vulnerability scans using ACAS, interpret results, and drive remediation efforts.
• Collaborate with developers to ensure secure coding practices and integrate security into CI/CD pipelines.
• Delineate physical and logical security boundaries for systems and networks.
• Ensure software developers are trained on secure software development practices.
• Generate and interpret vulnerability scans, implement STIGs and CIS Benchmarks, and support RMF Continuous Monitoring activities, including remediating and/or mitigating findings on system POA&Ms.

Skills

RMF experience

Vulnerability management

Automation

Python

Bash

Container security

CI/CD security

Security clearance TS/SCI

DoD 8140.01 certifications

Education

Bachelor's degree

Tools

Ansible

Python

Bash

VMware/ESXi

Docker

ACAS

DISA STIGs

CIS Benchmarks

SCAPs

Job description

JuniorSecurity Engineer - San Antonio, TX

• Full-time
• Compensation: USD 140,000 - USD 160,000 - yearly

At MAXISIQ, curious minds tackle real-world cyber challenges that matter. Teams develop, test, and secure advanced technology powering today’s and tomorrow’s missions. We experiment with the latest tools, prototype new solutions, and see projects go from concept to action. You will apply technical expertise to projects requiring rapid prototyping, secure integration, and the development of actionable solutions for clients who depend on leading-edge capabilities. Creative problem-solving is encouraged, and growth happens through hands-on work across software, hardware, and network security. If you want to make an impact, solve complex technical puzzles, and help defend critical systems, this is a place where your skills matter and your ideas shape the future of technology.

MAXISIQ is seeking a highly skilled Junior Security Engineer to maintain responsibility for all duties in support of Department of Defense (DoD), Risk Management Framework (RMF), and Intelligence Community Directive (ICD) 503, while applying strong security engineering principles and hands-on technical expertise. In addition to intermediate to advanced knowledge of NIST SP 800-53 security controls and CNSSI 1253, this role emphasizes engineering experience across system hardening, automation, and vulnerability remediation.

This is a hybrid role with possible locations in San Antonio, Augusta and the Fort Meade area.

Key responsibilities include:

• Assist developing layered protections and establish cybersecurity SOPs or guidelines for authorization boundaries.
• Perform vulnerability management and implement fix actions across Windows, Linux/Unix, and containerized environments.
• Engineer and automate and deploy security remediation configurations using tools such as Ansible and scripting in Python and Bash.
• Implement and maintain DISA STIGs and CIS Benchmarks across diverse platforms, including RHEL, Ubuntu, Windows operating systems, VMware/ESXi, and 3rd-party applications, as well as network devices such as Cisco (NXOS, ASRs, IOS-XE, ASA) and Juniper.
• Support container security engineering with Docker and related technologies.
• Conduct vulnerability scans using ACAS, interpret results, and drive remediation efforts.
• Collaborate with developers to ensure secure coding practices and integrate security into CI/CD pipelines.
• Delineate physical and logical security boundaries for systems and networks.
• Ensure software developers are trained on secure software development practices.
• Generate and interpret vulnerability scans, implement STIGs and CIS Benchmarks, and support RMF Continuous Monitoring activities, including remediating and/or mitigating findings on system POA&Ms.
• 5+ years as an Information Systems Security Engineer or Security Engineer with RMF experience.
• Possess working knowledge of cybersecurity tools, such as ACAS, DISA STIGs/SCAPs/CIS Benchmarks.
• Hands-on experience with vulnerability management and remediation across multiple operating systems.
• Proficiency with automation tools (Ansible) and scripting (Python/Bash).
• Working knowledge of virtualization platforms (VMware/ESXi) and container technologies (Docker).
• Familiarity with network device hardening and STIG implementation for Cisco and Juniper platforms.
• Experience applying DISA STIGs, SCAPs, and CIS Benchmarks.
• Top Secret/SCI Security Clearance.
• Bachelor’s degree from an accredited college or university.
• Security Architect certifications IAW DoD Directive 8140.01 (e.g., CompTIA CASP, Cisco CCSP, SANS GSEC).

At MAXISIQ, inclusion drives innovation. We are committed to creating a diverse and equitable workplace where all qualified applicants receive consideration for employmentincluding Veterans and Individuals with Disabilities.