Junior Security Engineer

CGI•Lafayette, LA

2d•Hybrid

About The Position

Advance your career as a Security Engineer on a technical DevSecOps team responsible for engineering secure-by-design infrastructure, applications, and automation. You will build, implement, and integrate security capabilities that protect complex enterprise systems—focusing on secure architecture, system hardening, tooling, and automation rather than monitoring or compliance operations. If you excel at designing secure systems, embedding controls into pipelines, and developing engineering solutions that measurably strengthen security, this role offers a deep technical career path. This position is located in our Lafayette, Louisiana or Knoxville, TN office; however, a hybrid working model is acceptable. Due to the nature of government projects, US citizenship is required.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field (or equivalent experience).
0-5 years of hands-on engineering experience in security, systems, infrastructure, or DevSecOps.
Technical background in networking, operating systems, scripting, and infrastructure design.
Experience engineering or integrating security tools (e.g., Qualys, AppScan, SonarQube, Splunk, CyberArk).
Experience with CI/CD systems and integrating automated scanning or guardrails.
Ability to write scripts (PowerShell, Bash, Python) to automate security controls.
Strong problem-solving skills and ability to engineer solutions to technical security problems.
Eligibility for federal background investigation and ability to meet security requirements.

Nice To Haves

Experience with cloud platform security (Azure/AWS).
Experience engineering container or Kubernetes security controls.
Knowledge of zero trust engineering principles.
Experience with infrastructure-as-code (Terraform, ARM/Bicep).
Relevant certifications (e.g., GSEC, GCIA, CySA+, cloud security certifications).

Responsibilities

Design, implement, and integrate security tools, controls, and architectures across applications, infrastructure, and CI/CD environments.
Harden operating systems, networks, application stacks, and pipeline components using secure configuration baselines and automated policy enforcement.
Develop scripts and automation to detect misconfigurations, enforce security standards, and validate secure deployments.
Engineer and embed automated security scanning and guardrails directly into CI/CD workflows.
Collaborate with development, DevOps, and infrastructure teams to embed security-by-design into new features, services, and system changes.
Support incident response activities at a technical level, including log analysis, containment engineering, and root-cause identification.
Implement and maintain integrations for vulnerability scanning, code scanning, and privileged access tooling.
Document security architectures, engineering decisions, configurations, and remediation actions.
Evaluate emerging threats and technologies and recommend engineering enhancements to improve platform resilience.
Contribute to continuous improvement by identifying opportunities to automate, strengthen, or modernize security controls.