Junior Information System Security Engineer

Overview

Information System Security Engineer LOCATION: Huntsville, AL (Onsite) JOB STATUS: Full-time CLEARANCE: Active Secret (Required) TRAVEL: Less than 10%

Astrion has an exciting opportunity for an eager Information System Security Engineer to support the organization's cybersecurity and vulnerability management programs. This role works closely with system administrators, database administrators, cloud engineers, and application owners to identify, prioritize, and remediate security vulnerabilities across enterprise systems.

The ideal candidate will have foundational cybersecurity knowledge, experience with security monitoring and vulnerability management tools, and a strong desire to develop technical expertise in enterprise security operations. This position will primarily leverage Microsoft Defender, Microsoft Sentinel, and Tenable to monitor security posture, investigate risks, and coordinate remediation activities.

REQUIRED QUALIFICATIONS / SKILLS

• Active Secret clearance (required)
• Bachelor's degree in Computer Science, Information Technology, or related field (or equivalent experience)
• Knowledge of:
• NIST 800-171 and CMMC requirements
• Active DoD 8140 (formerly DoD 8570) compliant baseline certification (e.g., Security+ CE, CISSP)

KEY COMPETENCIES

• 3 to 5 years of experience in cybersecurity, information security, system administration, or a related technical field.
• Exposure to vulnerability management, security monitoring, or incident response activities.
• Experience working in Microsoft environments.
• Basic understanding of cybersecurity principles and controls.
• Familiarity with vulnerability management concepts and remediation practices.
• Knowledge of operating systems including Windows Server and workstation platforms.
• Experience with or exposure to:
• Microsoft Defender
• Microsoft Sentinel
• Tenable Vulnerability Management
• Active Directory
• Microsoft 365 Security technologies
• Understanding of common vulnerabilities, threats, and attack techniques.
• Basic knowledge of networking concepts, protocols, and security fundamentals.
• Familiarity with security frameworks such as NIST Cybersecurity Framework or CIS Controls.

RESPONSIBILITIES

• Monitor, analyze, and respond to security alerts generated by Microsoft Defender and Microsoft Sentinel.
• Conduct routine vulnerability assessments using Defender, Tenable and other security tools.
• Review vulnerability scan results and work directly with system and application administrators to coordinate remediation activities.
• Track remediation efforts and validate closure of identified vulnerabilities.
• Assist in vulnerability prioritization using risk-based methodologies and business impact analyses.
• Support security monitoring, threat detection, and incident response activities.
• Investigate suspicious activity and security events and escalate issues as needed.
• Assist with endpoint security management using Microsoft Defender technologies.
• Develop and maintain security performance metrics, KPIs, and risk dashboards.
• Provide regular status updates to leadership regarding vulnerabilities, incidents, compliance activities, and overall system security posture.
• Identify trends and recommend strategic improvements to reduce organizational risk.
• Document security findings, remediation recommendations, and operational procedures.
• Participate in security assessments, audits, and compliance activities.
• Collaborate with infrastructure, cloud, server, networking, and application teams to improve overall security posture.
• Support implementation of security controls and best practices across enterprise systems.
• Stay informed of emerging threats, vulnerabilities, and cybersecurity trends.