Junior Cybersecurity Engineer

American National Standards Institute•New York, NY

2d•$82,800 - $91,100

About The Position

The Junior Cybersecurity Engineer, also referred to as Junior Security Analyst, supports the day-to-day protection of ANSI and ANAB information systems, applications and data. The role deliberately spans two complementary sides of the security function: hands-on security operations (log and alert review, security tooling, endpoint hardening, vulnerability and patch follow-up) and security assurance (IT security assessments, vendor reviews, compliance checks and risk reporting). The incumbent is expected to become competent in both. The position reports to the Chief Information Security Officer (CISO), who provides technical supervision, day-to-day direction and mentoring. This is an entry-level position, suited to a candidate at the start of a cybersecurity career who wants exposure to both engineering and governance, risk and compliance (GRC) rather than one or the other.

Requirements

Bachelor's degree in computer science, computer engineering, information security, information systems, mathematics or a related field of study. An associate's degree combined with relevant hands-on experience or a recognized technical certification will also be considered.
5 years of professional experience in information security role with genuine security exposure. Prior contact with both operational security work and audit or compliance activity is an advantage.
Working knowledge of networking fundamentals (TCP/IP, DNS, routing, network segmentation), Windows and Linux operating systems, cloud / SaaS concepts (Microsoft 365 and Azure preferred).
Familiarity with core security tooling, SIEM and log management, endpoint protection EDR, firewalls, IPS / WAF, vulnerability scanners, MFA and identity management.
Comfortable using basic scripting (PowerShell, Python) for reporting and repetitive tasks.
Rigor and attention to detail, particularly in evidence and documentation.
Able to take direction and act on feedback, to manage a queue of tasks without prompting, and to say when something is not understood.
Curiosity and a habit of self-directed learning.
Understands that security exists to protect ANSI's and ANAB's mission, members and accreditation activities, not to obstruct them.
Able to explain a risk in plain language to non-technical colleagues, to ask before assuming, and to recognize when an issue must be escalated rather than handled alone.
Able to handle confidential and sensitive information with discretion.
Occasional availability outside standard business hours during a security incident, a scheduled remediation window, or an audit deadline.

Nice To Haves

An entry-level security certification such as CompTIA Security+, CySA+ or Network+, ISC2 Certified in Cybersecurity (CC) is preferred. Candidates without one are expected to obtain at least one within the first twelve months, with ANSI's support.
Familiarity with business continuity and IT disaster recovery concepts is a plus.
Exposure to recognized security and risk frameworks - NIST CSF, NIST SP 800-53, ISO / IEC 27001 and 27002, CIS Controls is preferred but not essential; the willingness to learn and apply them is.
Interest in progressing toward a security engineering or GRC specialization, with a development path defined and supported by the Senior Cybersecurity Engineer.

Responsibilities

Maintain a complete, accurate and current inventory of systems, infrastructure and applications, and verify that every in-scope source is logging to the SIEM / log management platform. And is covered by all security controls and consoles.
Validate security configurations and access rights on security tooling, firewalls, intrusion prevention systems (IPS), web application firewalls (WAF), endpoint protection and anti-malware and report deviations from the approved baseline.
Support the change management process for firewall rulesets, including review of requests, documentation of approvals and periodic rule recertification. Represent IT Security’s interest during weekly CAB meeting.
Assist information security team in enforcing network segmentation/ secure architecture.
Assist information security team in Vulnerability and Threat Management Program, overall endpoint configuration hardening.
Assist information security team in Cloud security activities.
Verify that security and other critical patches to operating systems and firmware are deployed within defined timeframes and follow up on overdue items until closure.
Assist in operating and maintaining the security infrastructure and its configuration, including automated security controls across servers, endpoints, cloud workloads and network environments.
Support privileged activity monitoring and assist with the related investigations.
Assist with cryptographic key management tasks under established procedures.
Review security and infrastructure logs for indicators of compromise (IOCs) and anomalous behavior across networks, applications and user accounts; qualify findings by risk level and escalate confirmed issues to the Senior Cybersecurity Engineer. Create, run and improve Incident Response Playbooks.
Act as first-line support during security incidents: triage alerts, collect and preserve evidence, document the timeline, and assist with data and service recovery during disruption or disaster recovery events.
Assist in performing independent IT security assessments (audit, pentests), proactive and reactive reviews following upgrades, enhancements or incidents to identify security risks and non-compliance with ANSI / ANAB IT security policy, standards and guidelines.
Schedule and coordinate internal and external vulnerability assessments, support the procurement and scheduling of web application penetration testing, consolidate results and track remediation through to closure.
Perform IT security assessments of vendors and third parties against ANSI / ANAB security requirements, standards, and maintain the supporting records.
Identify, document and report IT security risks, and assist in developing treatments for risks raised internally and with third parties.
Help develop, maintain and monitor security standards, controls and processes, and track exceptions where a system, project or third party is not compliant with policy.
Provide security input into change projects and initiatives under the direction of the Chief Information Security Officer, including assessment of changes at Pre-CAB and CAB for security risk, and pre go-live test reviews.
Assist in preparing evidence, responses and remediation tracking for internal and external audits of the IT security function.
Contribute to security education and awareness activities for ANSI and ANAB staff.
Maintain documentation, procedures, runbooks, assessment records and recurring reporting that can be presented to management, auditors and peers without rework.
Track emerging threats, vulnerabilities and security technologies relevant to the ANSI / ANAB environment and summarize for the team what is material and what action it warrants.
Attend/complete assigned information security training by the designated completion date.
Read and adhere to published ISMS policies and procedures.
Report timely any observed violations of ISMS policy - or known encroachments on information security - to your department leader and/or the Information Technology Department.