Junior Security Specialist- Incident Response
About The Position
The Junior Security Specialist supports the Information Security Section in maintaining and improving the organization’s security posture. The role assists with incident response coordination, vulnerability scanning, system monitoring, and system analysis, working closely with senior team members to learn and apply security best practices, contribute to security projects, and help protect the confidentiality, integrity, and availability of organizational systems. It is a growth-oriented opportunity for someone with foundational cybersecurity knowledge who wants to develop skills in incident response, vulnerability and exposure management, threat detection, and security operations. The position is based at the West Creek Office in Richmond, Virginia. After completing training and the probationary period, the role follows a hybrid schedule of two days in the office and three days working from home. Relocation is not offered.
Requirements
- 1–3 years of experience in IT or cybersecurity-related roles.
- Associate’s or Bachelor’s degree in cybersecurity, information technology, or a related field.
- Basic understanding of network devices, operating systems, and security principles.
- Familiarity with penetration-testing tools and methodologies and the incident response lifecycle.
- Familiarity with vulnerability scanning tools and basic remediation processes.
- Understanding of network and endpoint security fundamentals.
- Ability to follow procedures and document work clearly.
- Strong communication and teamwork skills.
- Analytical thinking and attention to detail.
- Strong desire to learn and grow in the cybersecurity field.
Nice To Haves
- Entry-level certification, such as CompTIA Security+, GIAC GSEC, or Microsoft SC-900.
- Exposure to SIEM, EDR, IAM, or MDR platforms.
- Familiarity with NIST, CIS, or ISO security frameworks.
- Experience with cloud environments and mobile device management.
- Hands-on experience with basic troubleshooting and system monitoring.
Responsibilities
- Support incident response by gathering data and assisting with ticket triage.
- Assist with system event triage, non-conformance tracking, and other response actions.
- Assist with internal and external vulnerability scans and document findings.
- Coordinate with system owners and IT staff to support remediation of identified vulnerabilities.
- Monitor security tools and alerts, escalating issues to senior team members as needed.
- Participate in security awareness activities, including phishing simulations and training coordination.
- Help maintain documentation for security policies, procedures, and standards.
- Collaborate with IT and compliance teams on risk management and regulatory requirements.
- Stay informed about basic cybersecurity trends and threats through training and research.
- Assist with account access reviews and basic identity and access management tasks.
- Support endpoint protection efforts, including monitoring and updating security software.
- Participate in tabletop exercises and team training sessions.
- Help document un-remediated vulnerabilities in the risk registry under guidance.
- Perform other information security and cybersecurity duties as directed.
Benefits
- Ongoing job development and support in all roles.
- Paid training and continuing education reimbursement.
- Medical and dental insurance available on the first day.
- Generous employee 401K contribution.
- Paid time off (PTO) plan.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
Education Level
Associate degree
