初级安全工程师

Description
Dragonfli Group is a cybersecurity and IT consulting firm providing services to federal agencies and Fortune 100 enterprises. Headquartered in Washington, DC, Dragonfli supports clients in securing mission-critical systems across on-site, hybrid, and fully remote environments.
Dragonfli Group is seeking a Junior Security Engineer to join a multi-year cybersecurity modernization program supporting a large federal agency. This is an entry-level engineering role built for someone with a cybersecurity academic background who wants hands-on cloud and automation work from day one. You will help ensure appropriate security controls are in place to safeguard digital files and vital electronic infrastructure, support the design and integration of security solutions for complex system administration and network problems, and perform systems management and integration work in cloud environments. You will also support the integration and development of automated and AI-based solutions in complex cloud environments, working alongside more experienced engineers who will mentor you through the program’s tooling and processes.
This is a multi-year contract position involving a large US federal agency. Candidates with previous federal contracting experience are preferred. U.S. Citizenship or Permanent Residency is required. If hired, all work related to this role must be performed within the continental U.S.
This position is fully remote.
Responsibilities

• Help ensure appropriate security controls are in place to safeguard digital files and vital electronic infrastructure

• Support the design and integration of security solutions for complex problems, system administration issues, and network concerns

• Perform systems management and integration functions, primarily in cloud environments

• Support the integration and development of automated and AI-based solutions in complex cloud environments

• Assist senior engineers with configuration, hardening, and monitoring of security tooling

• Support evidence collection, control testing, and documentation for the agency’s security engineering activities

• Help maintain and enhance the agency’s cybersecurity environment and toolsets under the direction of the engineering team

• Assist with maintaining Security Configuration Baseline Management (SCBM) artifacts and STIG-based hardening checklists to help reduce configuration drift

• Support Security Controls Traceability Matrix (SCTM) updates and help prepare materials for Change Advisory Board (CAB) review of proposed engineering changes

• Escalate technical issues promptly, documenting what was tried, what was observed, and what remains open

Requirements
Must-Have

• Bachelor’s degree in cybersecurity, computer science, information technology, or a closely related field

• A demonstrated cybersecurity background through coursework, internships, labs, certifications, or prior professional work

• Working familiarity with Microsoft Azure

• Understanding of core security concepts: access control, encryption, logging and monitoring, vulnerability management

• U.S. Citizenship or Permanent Residency, with all work performed within the continental U.S.

• Ability to pass a federal agency suitability or background investigation

Preferred / Nice-to-Have

• Internship, co-op, or 1 to 2 years of professional experience in a security or IT operations role

• Scripting experience in Python, PowerShell, or Bash

• Exposure to security automation, low-code/no-code platforms, or AI-assisted tooling

• Familiarity with NIST SP 800-53 control families

• Security+ or an equivalent entry-level certification

• Prior exposure to federal or otherwise regulated environments

Skill(s)
Technical Skills

• Cloud fundamentals and cloud systems integration (Microsoft Azure)

• Security control concepts and secure configuration basics

• Scripting and task automation (Python, PowerShell, Bash)

• Familiarity with SIEM (Splunk), vulnerability scanning (Qualys, Tenable), and endpoint security tooling

• Logging, monitoring, and basic incident triage concepts

• Networking fundamentals: TCP/IP, DNS, firewalls, and segmentation

• Exposure to AI-assisted and low-code/no-code security capabilities

• Exposure to configuration baseline management (SCBM), STIG-based hardening, control traceability (SCTM), and change management (CAB) processes

• Technical documentation and evidence capture

Soft Skills

• Clear written and verbal communication with both technical and non-technical audiences

• Ability to work independently and as a contributing member of a distributed team

• Comfort operating in a fully remote setting with a camera-on meeting culture

• Sound judgment about when to decide and when to escalate

• Collaborative posture with system owners, business owners, developers, and assessors

• Attention to documentation quality and follow-through on commitments

Benefits
Dragonfli Group offers a comprehensive benefits package that includes:

• Medical: Multiple POS health plan options including an HSA-compatible plan

• Dental: PPO coverage for preventive, basic, and major services

• Vision: Annual exam, frames, lenses, and contact lens allowance

• 401(k): Employer match up to 5% of eligible compensation

• Long-Term Disability: 100% employer-paid coverage at 50% of pre-disability earnings

• Life Insurance & AD&D: 100% employer-paid coverage valued at $10,000 each

• PTO: 15–25 days annually based on tenure

• Paid Federal Holidays: All 11 federal holidays observed

Originally posted on Himalayas