Junior Security Engineer – DevSecOps (Hybrid)

About the role

Join a technical DevSecOps team that builds secure‑by‑design infrastructure, applications, and automation. You will embed security controls directly into CI/CD pipelines and harden operating systems, networks, and application stacks for complex enterprise environments.

Key responsibilities

• Design, implement, and integrate security tools, controls, and architectures across applications, infrastructure, and CI/CD environments.
• Harden operating systems, networks, and pipeline components using secure configuration baselines and automated policy enforcement.
• Develop scripts and automation to detect misconfigurations, enforce standards, and validate secure deployments.
• Embed automated security scanning and guardrails into CI/CD workflows.
• Collaborate with development, DevOps, and infrastructure teams to ensure security‑by‑design for new features and services.
• Support technical incident response, including log analysis, containment engineering, and root‑cause identification.
• Maintain integrations for vulnerability scanning, code scanning, and privileged‑access tooling.
• Document security architectures, engineering decisions, configurations, and remediation actions.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or equivalent experience.
• 0‑5 years of hands‑on engineering experience in security, systems, infrastructure, or DevSecOps.
• Strong problem‑solving skills and ability to engineer technical security solutions.
• Eligibility for a federal background investigation and US citizenship.

Required skills

• Experience with security tools such as Qualys, AppScan, SonarQube, Splunk, CyberArk.
• Proficiency with CI/CD systems and integrating automated scanning or guardrails.
• Scripting abilities in PowerShell, Bash, and Python.
• Technical background in networking, operating systems, and infrastructure design.