On-Site Junior Security Engineer: Vulnerability & RMF

Via Logic LLC; Bethesda (MD); On-site; USD 70,000 - 126,000; Full time

Job summary

Leidos is seeking a Junior Security Engineer to support day-to-day security activities across enterprise and isolated environments. This role provides hands‑on support for security operations, vulnerability management, RMF/ATO activities and continuous monitoring.

The position collaborates with senior security personnel, system administrators, engineers and other technical teams to implement security requirements, identify and remediate issues and maintain the overall security posture.

Qualifications

• Bachelor's degree with at least 2 years of relevant experience.
• Active TS/SCI clearance with polygraph or willingness to obtain.
• US Citizenship is required due to government contracts.

Responsibilities

• Perform day-to-day security activities under the direction of senior security personnel and elevate risks, technical issues and blockers as appropriate.
• Support vulnerability management activities from identification through closure, including analysis, remediation, validation and documentation.
• Perform vulnerability scanning and analyze findings using ACAS, Tenable/Nessus or equivalent technologies.
• Work with Windows, Linux, network, desktop support and other engineering teams to assist with vulnerability remediation and security‑related technical issues.
• Implement and validate DISA STIGs and approved security configuration baselines across infrastructure systems.
• Perform recurring security activities, including audit log reviews, account reviews, vulnerability reviews, security control validation and continuous monitoring.
• Support RMF/ATO activities, including security documentation, control evidence, BoE, POA&Ms and compliance with NIST SP 800-53, ICD 503 and applicable security directives.
• Assist with reviewing system and configuration changes for potential security impact and document findings for review by senior security personnel and the ISSM.
• Support security activities for isolated or restricted environments, including vulnerability scanning, logging, patching, hardening and security monitoring.
• Review security logs and events using Splunk or equivalent SIEM/log-management technologies and elevate identified issues as appropriate.
• Assist with maintaining security procedures, documentation, compliance evidence and vulnerability remediation records.
• Track assigned security findings, remediation activities and action items through completion and provide status updates as required.
• Participate in security reviews, engineering meetings and TEMs as required.
• Research security vulnerabilities, technical requirements and remediation approaches and provide findings and recommendations to senior security personnel.
• Develop technical knowledge across the environment and take on increased responsibility for security activities as experience and proficiency grow.

Skills

Windows Server 2016/2019

Active Directory

IIS

DNS

DHCP

Exchange

ACAS

Nessus

Splunk

McAfee HBSS

NIST SP 800-53

IAT Level II

Education

Bachelor's degree

Tools

STIGs

Job description

Leidos is seeking a Junior Security Engineer to support day-to-day security activities across enterprise and isolated environments. This role provides hands‑on support for security operations, vulnerability management, RMF/ATO activities and continuous monitoring.

The position collaborates with senior security personnel, system administrators, engineers and other technical teams to implement security requirements, identify and remediate issues and maintain the overall security posture.