Junior Security Engineer

Maximus is a trusted federal partner supporting mission-critical programs across national security, defense, and public service delivery. The Junior Security Engineer supports 24x7 enterprise cybersecurity operations by monitoring security tools, performing initial incident triage, and assisting with containment, vulnerability management, and compliance activities.

Responsibilities:

• Provide 24x7x365 support for enterprise cybersecurity operations, assisting with execution of directed cyber actions under senior guidance
• Perform basic containment activities, including access changes, application removal, configuration updates, and allow/block list management following established procedures
• Support vulnerability management activities, including scanning coordination, remediation tracking, and compliance support
• Assist with implementation and tracking of ISVM-related requirements, ensuring timely remediation and reporting of vulnerabilities
• Contribute to POA&M tracking activities, supporting remediation efforts and preparation of recurring cybersecurity scorecard data
• Monitor security tools and alerts, performing initial triage and escalating issues in accordance with defined processes
• Maintain and update incident records, documentation, and runbooks to support auditability and knowledge management
• Support testing and validation activities related to patching, upgrades, configuration changes, and cyber actions
• Assist with spill response activities and follow established procedures to support containment and recovery efforts
• Provide support across enterprise platforms including cloud environments, operating systems, databases, and network/security infrastructure

Requirements:

• 1+ years of experience in cybersecurity operations, security governance, or enterprise security program support
• Experience supporting cybersecurity operations, vulnerability management, or IT security functions
• Familiarity with basic incident response and containment procedures
• Understanding of vulnerability management processes and compliance requirements (e.g., scanning, remediation tracking)
• Experience working with security tools, monitoring systems, or ticketing platforms
• Ability to follow standard operating procedures and security runbooks
• Experience supporting documentation, incident tracking, and compliance reporting activities
• Basic understanding of cloud (AWS/Azure), operating systems, and network security concepts
• Ability to work in a 24/7 operational environment with defined escalation procedures
• Ability to obtain and maintain a Public Trust is required
• Must be a U.S. Citizen without dual citizenship
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience)
• Familiarity supporting large-scale enterprise security operations environments
• Familiarity with risk management, POA&M governance, and compliance frameworks
• Experience coordinating with security operations centers and external security organizations
• Basic knowledge of ITIL-based incident and change management processes
• Some reporting, metrics, and dashboard development experience
• Ability to work in cross-functional high-visibility environments
• Strong communication skills