Junior Security Engineer at Maximus in United States

Job description

• The Junior Security Engineer supports 24x7 enterprise cybersecurity operations by monitoring security tools, performing initial incident triage, and assisting with containment, vulnerability management, and compliance activities. The role works under senior guidance to execute defined cyber actions, maintain incident documentation, support POA&M and ISVM tracking, and assist with patching, testing, and spill response. The position requires familiarity with security operations processes, cloud and infrastructure fundamentals, and the ability to follow established runbooks in a high‑availability operational environment.
• This position is contingent upon contract award and position availability. Selected candidates will receive a contingent offer of employment, which will become final only upon successful contract award to Maximus, availability of the position, and receipt of authorization to proceed.
• Ability to obtain and maintain a Public Trust is required. An active Public Trust and/or DHS suitability is preferred. U.S. citizenship or U.S. national status is required.
• This is a remote position.
• Maximus TCS (Technology and Consulting Services) Internal Job Profile Code: TCS055, T1, Band 4

Responsibilities

• - Provide 24x7x365 support for enterprise cybersecurity operations, assisting with execution of directed cyber actions under senior guidance.
• - Perform basic containment activities, including access changes, application removal, configuration updates, and allow/block list management following established procedures.
• - Support vulnerability management activities, including scanning coordination, remediation tracking, and compliance support.
• - Assist with implementation and tracking of ISVM-related requirements, ensuring timely remediation and reporting of vulnerabilities.
• - Contribute to POA&M tracking activities, supporting remediation efforts and preparation of recurring cybersecurity scorecard data.
• - Monitor security tools and alerts, performing initial triage and escalating issues in accordance with defined processes.
• - Maintain and update incident records, documentation, and runbooks to support auditability and knowledge management.
• - Support testing and validation activities related to patching, upgrades, configuration changes, and cyber actions.
• - Assist with spill response activities and follow established procedures to support containment and recovery efforts.
• - Provide support across enterprise platforms including cloud environments, operating systems, databases, and network/security infrastructure.

Requirements

• - 1+ years of experience in cybersecurity operations, security governance, or enterprise security program support
• - Experience supporting cybersecurity operations, vulnerability management, or IT security functions.
• - Familiarity with basic incident response and containment procedures.
• - Understanding of vulnerability management processes and compliance requirements (e.g., scanning, remediation tracking).
• - Experience working with security tools, monitoring systems, or ticketing platforms.
• - Ability to follow standard operating procedures and security runbooks.
• - Experience supporting documentation, incident tracking, and compliance reporting activities.
• - Basic understanding of cloud (AWS/Azure), operating systems, and network security concepts.
• - Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience)
• - Familiarity supporting large-scale enterprise security operations environments
• - Familiarity with risk management, POA&M governance, and compliance frameworks
• - Experience coordinating with security operations centers and external security organizations
• - Basic knowledge of ITIL-based incident and change management processes
• - Some reporting, metrics, and dashboard development experience
• - Ability to work in cross-functional high-visibility environments
• - Strong communication skills

Skills

Required

• cybersecurity operations
• security governance
• enterprise security program support
• incident response
• containment procedures
• vulnerability management
• compliance requirements
• security tools
• monitoring systems
• ticketing platforms
• standard operating procedures
• security runbooks

Preferred

• risk management
• POA&M governance
• compliance frameworks
• security operations centers
• external security organizations
• reporting
• metrics
• dashboard development

Benefits

• Maximus compensation is based on various factors including but not limited to job location, a candidate's education, training, experience, expected quality and quantity of work, required travel (if any), external market and internal value analysis including seniority and merit systems, as well as internal pay alignment. Annual salary is just one component of Maximus's total compensation package. Other rewards may include short- and long-term incentives as well as program-specific awards. Additionally, Maximus provides a variety of benefits to employees, including health insurance coverage, life and disability insurance, a retirement savings plan, paid holidays and paid time off. Compensation ranges may differ based on contract value but will be commensurate with job duties and relevant work experience. An applicant's salary history will not be used in determining compensation. Maximus will comply with regulatory minimum wage rates and exempt salary thresholds in all instances.
• $ 40,000.00
• Maximum Salary
• $ 65,000.00