Junior Security Engineer - Zero Trust & SCIF Focus

Cybersecurity Jobs; Washington (District of Columbia); On-site; USD 90,000 - 130,000; Full time

Job summary

Tharros is seeking a Junior Security Engineer to support cybersecurity engineering for the Department of Homeland Security. This on-site role in a Government SCIF in Washington, DC, covers enterprise audit support, cloud/compliance, and Zero Trust enablement.

You will automate security tooling, align with DISA STIGs, and convert security data into dashboards and roadmaps for governance and engineering teams.

Qualifications

• BS degree in IT, Cybersecurity, Information Systems, or CS, or minimum 4 years in IT/cybersecurity.
• At least 1 year of security engineering, systems administration, or DevSecOps experience.
• Active TS/SCI clearance and U.S. citizenship; willing to undergo polygraph.
• Proficiency with Python, PowerShell, or shell scripting.
• Knowledge of DISA STIGs and configuration compliance scanning.
• Familiarity with Windows and Linux audit logging concepts.
• Understanding of Zero Trust architecture principles.

Responsibilities

• Maintain and update cybersecurity tools (ACAS/Nessus, SCAP, SonarQube, GitLab).
• Update STIGs quarterly and manage Nessus plug-in IDs monthly.
• Develop and troubleshoot automation scripts for STIGs in the DevSecOps pipeline.
• Organize security data into near-real-time dashboards using a GRC platform.
• Support ICS 500-27 audit requirements and build audit dashboards with ISSOs.
• Contribute to Zero Trust gap analysis and Zero Trust dashboards.
• Track network device end-of-life and end-of-service dates.

Skills

Python

PowerShell

Shell scripting

Zero Trust concepts

Security communication

Microsoft Office

Education

BS degree in IT/Cybersecurity/Information Systems/CS

Tools

ACAS/Nessus

SCAP

SonarQube

GitLab

Nessus plug-in IDs

GRC tools

Job description

Tharros is seeking a Junior Security Engineer to support cybersecurity engineering for the Department of Homeland Security. This on-site role in a Government SCIF in Washington, DC, covers enterprise audit support, cloud/compliance, and Zero Trust enablement.

You will automate security tooling, align with DISA STIGs, and convert security data into dashboards and roadmaps for governance and engineering teams.