Junior Security Engineer

Dragonfli Group is a cybersecurity and IT consulting firm providing services to federal agencies and Fortune 100 enterprises. Headquartered in Washington, DC, Dragonfli supports clients in securing mission-critical systems across on-site, hybrid, and fully remote environments.
Dragonfli Group is seeking a Junior Security Engineer to join a multi-year cybersecurity modernization program supporting a large federal agency. This is an entry-level engineering role built for someone with a cybersecurity academic background who wants hands-on cloud and automation work from day one. You will help ensure appropriate security controls are in place to safeguard digital files and vital electronic infrastructure, support the design and integration of security solutions for complex system administration and network problems, and perform systems management and integration work in cloud environments. You will also support the integration and development of automated and AI-based solutions in complex cloud environments, working alongside more experienced engineers who will mentor you through the program’s tooling and processes.
This is a multi-year contract position involving a large US federal agency. Candidates with previous federal contracting experience are preferred. U.S. Citizenship or Permanent Residency is required. If hired, all work related to this role must be performed within the continental U.S.
This position is fully remote.
Responsibilities
Help ensure appropriate security controls are in place to safeguard digital files and vital electronic infrastructure
Support the design and integration of security solutions for complex problems, system administration issues, and network concerns
Perform systems management and integration functions, primarily in cloud environments
Support the integration and development of automated and AI-based solutions in complex cloud environments
Assist senior engineers with configuration, hardening, and monitoring of security tooling
Support evidence collection, control testing, and documentation for the agency’s security engineering activities
Help maintain and enhance the agency’s cybersecurity environment and toolsets under the direction of the engineering team
Assist with maintaining Security Configuration Baseline Management (SCBM) artifacts and STIG-based hardening checklists to help reduce configuration drift
Support Security Controls Traceability Matrix (SCTM) updates and help prepare materials for Change Advisory Board (CAB) review of proposed engineering changes
Escalate technical issues promptly, documenting what was tried, what was observed, and what remains open
Requirements:
Must-Have
Bachelor’s degree in cybersecurity, computer science, information technology, or a closely related field
A demonstrated cybersecurity background through coursework, internships, labs, certifications, or prior professional work
Working familiarity with Microsoft Azure
Understanding of core security concepts: access control, encryption, logging and monitoring, vulnerability management
U.S. Citizenship or Permanent Residency, with all work performed within the continental U.S.
Ability to pass a federal agency suitability or background investigation
Preferred / Nice-to-Have
Internship, co-op, or 1 to 2 years of professional experience in a security or IT operations role
Scripting experience in Python, PowerShell, or Bash
Exposure to security automation, low-code/no-code platforms, or AI-assisted tooling
Familiarity with NIST SP 800-53 control families
Security+ or an equivalent entry-level certification
Prior exposure to federal or otherwise regulated environments
Skill(s):
Technical Skills
Cloud fundamentals and cloud systems integration (Microsoft Azure)
Security control concepts and secure configuration basics
Scripting and task automation (Python, PowerShell, Bash)
Familiarity with SIEM (Splunk), vulnerability scanning (Qualys, Tenable), and endpoint security tooling
Logging, monitoring, and basic incident triage concepts
Networking fundamentals: TCP/IP, DNS, firewalls, and segmentation
Exposure to AI-assisted and low-code/no-code security capabilities
Exposure to configuration baseline management (SCBM), STIG-based hardening, control traceability (SCTM), and change management (CAB) processes
Technical documentation and evidence capture
Soft Skills
Clear written and verbal communication with both technical and non-technical audiences
Ability to work independently and as a contributing member of a distributed team
Comfort operating in a fully remote setting with a camera-on meeting culture
Sound judgment about when to decide and when to escalate
Collaborative posture with system owners, business owners, developers, and assessors
Attention to documentation quality and follow-through on commitments
Benefits:
Dragonfli Group offers a comprehensive benefits package that includes:
Medical: Multiple POS health plan options including an HSA-compatible plan
Dental: PPO coverage for preventive, basic, and major services
Vision: Annual exam, frames, lenses, and contact lens allowance
401(k): Employer match up to 5% of eligible compensation
Long-Term Disability: 100% employer-paid coverage at 50% of pre-disability earnings
Life Insurance & AD&D: 100% employer-paid coverage valued at $10,000 each
PTO: 15–25 days annually based on tenure
Paid Federal Holidays: All 11 federal holidays observed

Work arrangement
No