Junior Security Engineer (HYBRID)

Koniag IT Systems, LLC (KITS), a Koniag Government Services company, is seeking a motivated, technically developing Junior Security Engineer to support cybersecurity architecture and engineering activities for the U.S. Small Business Administration (SBA) in Washington, D.C. This position requires the ability to obtain and maintain a Public Trust. Daily on-site work is required, with some flexibility for hybrid work.

Benefits include medical, dental, and vision insurance, 401(k) retirement plan, paid time off, paid parental leave, life and disability insurance, flexible spending accounts, commuter benefits, and tuition reimbursement.

The Junior Security Engineer serves as an emerging technical contributor supporting SBA’s cybersecurity engineering and architecture functions. The Junior Security Engineer assists in applying security baselines, reviewing system configurations, supporting STIG/SRG compliance, contributing to security design documentation, and helping ensure SBA systems align with federal cybersecurity requirements and SBA-specific security policies.

The ideal candidate is an early‑career cybersecurity professional with foundational knowledge of federal cybersecurity frameworks, system configuration hardening, vulnerability remediation, and enterprise security engineering concepts. This individual must demonstrate strong analytical skills, attention to detail, and a willingness to learn within a highly regulated federal IT environment.

The Junior Security Engineer will work under the guidance of senior engineers and SBA cybersecurity leadership to support tasks related to security architecture development, compliance with SBA and federal mandates, configuration reviews, and continuous improvement of SBA’s security posture.

Principal Responsibilities Include but Are Not Limited To:

Security Architecture & Engineering Support

• Assist senior engineers in reviewing SBA system architectures, configurations, and design artifacts for alignment with federal cybersecurity standards and SBA policies.
• Support the application and interpretation of Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), and federal baselines across SBA systems and environments.
• Help maintain security engineering documentation, including architecture diagrams, data flow diagrams, and security configuration records.
• Assist with enclave‑level or system-level security design considerations under senior supervision.
• Participate in engineering reviews to identify control gaps, misconfigurations, or vulnerabilities.

Configuration & Baseline Hardening

• Support the assessment of system configurations for alignment with SBA baselines, NIST controls, and federal hardening requirements.
• Assist in documenting remediation steps and tracking configuration compliance improvements.
• Perform initial reviews of Ports, Protocols, and Services (PPSM) configurations and document findings.

Continuous Monitoring & Compliance Support

• Support SBA’s continuous monitoring program by collecting and analyzing security‑relevant configuration and compliance data.
• Assist in preparing compliance reporting artifacts, such as dashboards, metrics summaries, and findings logs.
• Ensure engineering activities comply with federal frameworks including FISMA, NIST SP 800‑53, NIST SP 800‑171, and SBA security policy.

Risk Management Framework (RMF) Support

• Assist with the preparation and maintenance of RMF security artifacts, including security design documents, control implementation summaries, and system security plans.
• Contribute to security engineering sections of Assessment & Authorization (A&A) packages.
• Support system owners by documenting security considerations for new technologies and system updates.

Security Review & Assessment Assistance

• Participate in architecture assessments, configuration reviews, and gap analyses under senior guidance.
• Assist with identifying vulnerabilities or misconfigurations and recommend initial remediation approaches.
• Support engineering-related after-action reporting and lessons-learned documentation.

Documentation & Reporting

• Develop and maintain accurate engineering documentation, including configuration notes, review summaries, and compliance checklists.
• Assist in preparing recurring engineering and security posture reports for SBA leadership.
• Support change management documentation and technical justification development.

Education and Experience Requirements

Required:

• U.S. citizen.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field. Equivalent experience or military service may be considered.
• 1–3 years of experience supporting cybersecurity engineering, cybersecurity operations, system administration, or related IT technical functions.
• Foundational understanding of security configuration baselines, vulnerability management concepts, or STIG/SRG application.
• Ability to obtain and maintain a government background investigation and required SBA access authorizations.

Preferred:

• Prior experience supporting cybersecurity or engineering activities in a federal government environment.
• Exposure to configuration assessment tools (e.g., SCAP tools, STIG Viewer).
• Familiarity with federal RMF processes or NIST SP 800‑53 security controls.

Required Skills and Competencies

• Foundational understanding of security configuration hardening, baselines, and control implementation.
• Basic understanding of NIST cybersecurity frameworks and federal compliance requirements.
• Ability to interpret technical data, system configurations, and architecture documentation.
• Strong analytical thinking skills with demonstrated attention to detail.
• Eagerness to learn and develop technical and professional skills.
• Strong written and verbal communication skills suitable for federal documentation standards.
• Ability to work effectively within a collaborative federal cybersecurity engineering team.
• Proficiency with Microsoft Office, Teams, and SharePoint.

Desired Skills and Competencies

• CompTIA Security+, CySA+, or other entry‑level cybersecurity certification.
• Experience with vulnerability scanning or configuration assessment tools.
• Introductory knowledge of Zero Trust principles.
• Familiarity with scripting languages such as PowerShell, Bash, or Python.
• Exposure to cloud security concepts (Azure, AWS, M365).
• Experience with federal cybersecurity documentation, audits, or compliance reporting.

Our Equal Employment Opportunity Policy:

The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.

The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or to apply to a position on our website, please contact Heaven Wood via e-mail at accommodations@koniag-gs.com or by calling 703-488-9377 to request accommodations.

Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.

Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352