Junior Security Engineer

About the role

Dragonfli Group is a cybersecurity and IT consulting firm providing services to federal agencies and Fortune 100 enterprises. Headquartered in Washington, DC, Dragonfli supports clients in securing mission-critical systems across on-site, hybrid, and fully remote environments. Dragonfli Group is seeking a Junior Security Engineer to join a multi-year cybersecurity modernization program supporting a large federal agency. This is an entry-level engineering role built for someone with a cybersecurity academic background who wants hands-on cloud and automation work from day one. You will help ensure appropriate security controls are in place to safeguard digital files and vital electronic infrastructure, support the design and integration of security solutions for complex system administration and network problems, and perform systems management and integration work in cloud environments. You will also support the integration and development of automated and AI-based solutions in complex cloud environments, working alongside more experienced engineers who will mentor you through the program’s tooling and processes. This is a multi-year contract position involving a large US federal agency. Candidates with previous federal contracting experience are preferred. U.S. Citizenship or Permanent Residency is required. If hired, all work related to this role must be performed within the continental U.S. This position is fully remote.

Responsibilities

• Help ensure appropriate security controls are in place to safeguard digital files and vital electronic infrastructure
• Support the design and integration of security solutions for complex problems, system administration issues, and network concerns
• Perform systems management and integration functions, primarily in cloud environments
• Support the integration and development of automated and AI-based solutions in complex cloud environments
• Assist senior engineers with configuration, hardening, and monitoring of security tooling
• Support evidence collection, control testing, and documentation for the agency’s security engineering activities
• Help maintain and enhance the agency’s cybersecurity environment and toolsets under the direction of the engineering team
• Assist with maintaining Security Configuration Baseline Management (SCBM) artifacts and STIG-based hardening checklists to help reduce configuration drift
• Support Security Controls Traceability Matrix (SCTM) updates and help prepare materials for Change Advisory Board (CAB) review of proposed engineering changes
• Escalate technical issues promptly, documenting what was tried, what was observed, and what remains open

Requirements

Must‑Have:

• Bachelor’s degree in cybersecurity, computer science, information technology, or a closely related field
• A demonstrated cybersecurity background through coursework, internships, labs, certifications, or prior professional work
• Working familiarity with Microsoft Azure
• Understanding of core security concepts: access control, encryption, logging and monitoring, vulnerability management
• U.S. Citizenship or Permanent Residency, with all work performed within the continental U.S.
• Ability to pass a federal agency suitability or background investigation

Preferred / Nice‑to‑Have:

• Internship, co-op, or 1 to 2 years of professional experience in a security or IT operations role
• Scripting experience in Python, PowerShell, or Bash
• Exposure to security automation, low-code/no-code platforms, or AI-assisted tooling
• Familiarity with NIST SP 800-53 control families
• Security+ or an equivalent entry-level certification
• Prior exposure to federal or otherwise regulated environments

Skills

Technical Skills:

• Cloud fundamentals and cloud systems integration (Microsoft Azure)
• Security control concepts and secure configuration basics
• Scripting and task automation (Python, PowerShell, Bash)
• Familiarity with SIEM (Splunk), vulnerability scanning (Qualys, Tenable), and endpoint security tooling