Junior Security Engineer

This role assists with security monitoring, vulnerability management, incident response, identity and access management, security tool administration, and implementation of security controls across the enterprise.

The Junior Security Engineer works under the guidance of senior security team members to develop technical expertise while helping maintain a secure computing environment.

FUNCTIONS OF THE JOB:

Essential Functions: which may be representative but not all inclusive of those commonly associated with this position.

Participate in the investigation and remediation of cybersecurity incidents.
Investigate and escalate suspicious activity to senior security staff.
Assist with daily cybersecurity operational tasks and ticket management.
Support security monitoring activities and document findings.
Collect and preserve system logs and evidence as directed.
Support communication and coordination efforts during security events.
Perform third party risk reviews.
Support deployment and testing of new security tools and controls.
Assist with security awareness initiatives and phishing simulations.
Support compliance assessments and evidence collection activities.
Help maintain security policies, standards, and procedures.
Participate in security training and certification programs.
Develop technical knowledge of enterprise security technologies and processes.
Monitor various intelligence feeds to identify emerging threats and vulnerabilities.
Assists with the development of dashboards and data visualizations for executive management, operations teams, and other stakeholders.
Assist with the management of the BMI SharePoint environment.
Assist with the ongoing Data Loss Prevention efforts.
Participate in the Security Operations Center (SOC) on-call rotation.

POSITION QUALIFICATION REQUIREMENTS
Education: At least 1 year of college in Computer Science, Information Security, or a related field.

Experience: 1-2 years of information security, IT, or related technical experience preferred, but not required. Candidates with relevant coursework, internships, certifications, or hands-on experience are encouraged to apply.

Skills and Abilities: which may be representative but not all inclusive of those commonly associated with this position.

Basic understanding of cybersecurity principles and best practices.
Familiarity with Windows, MacOS, Linux, and cloud environments.
Knowledge of common cybersecurity concepts including:

Vulnerability Management
MFA and Identity Management
Endpoint Security
SIEM Monitoring
Network Security Fundamentals
Incident Response Processes

Strong analytical and problem-solving skills.
Ability to learn new technologies quickly.
Excellent written and verbal communication skills.
Strong attention to detail.
Ability to work effectively both independently and within a team environment.
Ability to maintain confidentiality and handle sensitive information appropriately.

Compensation: The salary range for this position is $70,000 – $90,000 per year. Actual compensation will be determined based on factors including experience, education, skills, and geographic location. This range does not include potential bonuses, equity, or benefits, which are addressed separately .

This job description in no way states or implies that these are the only duties to be performed by the employee occupying the position. Employees may be required to follow other job-related instructions and perform other job-related duties as requested, subject to all applicable state and federal laws.

“Commonly associate” is not intended to mean always or only. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.