Junior Security Engineer

Dragonfli Group is a cybersecurity and IT consulting firm providing services to federal agencies and Fortune 100 enterprises. The company seeks a Junior Security Engineer to support a federal cybersecurity modernization program through cloud systems integration, security engineering, automation, AI-based solutions, configuration management, monitoring, and documentation.

Responsibilities:

• Help ensure appropriate security controls are in place to safeguard digital files and vital electronic infrastructure
• Support the design and integration of security solutions for complex problems, system administration issues, and network concerns
• Perform systems management and integration functions, primarily in cloud environments
• Support the integration and development of automated and AI-based solutions in complex cloud environments
• Assist senior engineers with configuration, hardening, and monitoring of security tooling
• Support evidence collection, control testing, and documentation for the agency’s security engineering activities
• Help maintain and enhance the agency’s cybersecurity environment and toolsets under the direction of the engineering team
• Assist with maintaining Security Configuration Baseline Management (SCBM) artifacts and STIG-based hardening checklists to help reduce configuration drift
• Support Security Controls Traceability Matrix (SCTM) updates and help prepare materials for Change Advisory Board (CAB) review of proposed engineering changes
• Escalate technical issues promptly, documenting what was tried, what was observed, and what remains open

Requirements:

• • Bachelor's degree in cybersecurity, computer science, information technology, or a closely related field
• • A demonstrated cybersecurity background through coursework, internships, labs, certifications, or prior professional work
• • Working familiarity with Microsoft Azure
• • Understanding of core security concepts: access control, encryption, logging and monitoring, vulnerability management
• • U.S. Citizenship or Permanent Residency, with all work performed within the continental U.S
• • Ability to pass a federal agency suitability or background investigation
• • Cloud fundamentals and cloud systems integration (Microsoft Azure)
• • Security control concepts and secure configuration basics
• • Scripting and task automation (Python, PowerShell, Bash)
• • Familiarity with SIEM (Splunk), vulnerability scanning (Qualys, Tenable), and endpoint security tooling
• • Logging, monitoring, and basic incident triage concepts
• • Networking fundamentals: TCP/IP, DNS, firewalls, and segmentation
• • Exposure to AI-assisted and low-code/no-code security capabilities
• • Exposure to configuration baseline management (SCBM), STIG-based hardening, control traceability (SCTM), and change management (CAB) processes
• • Technical documentation and evidence capture
• • Clear written and verbal communication with both technical and non-technical audiences
• • Ability to work independently and as a contributing member of a distributed team
• • Comfort operating in a fully remote setting with a camera-on meeting culture
• • Sound judgment about when to decide and when to escalate
• • Collaborative posture with system owners, business owners, developers, and assessors
• • Attention to documentation quality and follow-through on commitments
• • Internship, co-op, or 1 to 2 years of professional experience in a security or IT operations role
• • Scripting experience in Python, PowerShell, or Bash
• • Exposure to security automation, low-code/no-code platforms, or AI-assisted tooling
• • Familiarity with NIST SP 800-53 control families
• • Security+ or an equivalent entry-level certification
• • Prior exposure to federal or otherwise regulated environments