Junior Security Analyst (Job 1109)

About Us

DLH delivers improved health and national security readiness solutions for federal programs through science research and development, systems engineering and integration, and digital transformation. Our experts in public health, performance evaluation, and health operations solve the complex problems faced by civilian and military customers alike by leveraging advanced tools – including digital transformation, artificial intelligence, data analytics, cloud enablement, modeling, and simulation, and more. With over 3,200 employees dedicated to the idea that “Your Mission is Our Passion,” DLH brings a unique combination of government sector experience, proven methodology, and unwavering commitment to innovation to improve the lives of millions.

Overview 

We are seeking a Junior Security Analyst to provide support for Assessment & Authorization (A&A) activities and serve as a liaison between the application development team and the A&A/security compliance team. This role will focus on supporting security compliance tasks, tracking and managing system security documentation, handling vulnerability tickets, and assisting in triaging security findings for remediation. 

The ideal candidate will have a foundational understanding of information security, risk management, and compliance frameworks (e.g., NIST, FedRAMP, FISMA). This is an excellent opportunity for someone looking to grow in cybersecurity and compliance while working closely with development and security teams in a dynamic environment. 

Responsibilities 

• Support A&A processes, including maintaining and updating security documentation (e.g., System Security Plans, POA&Ms, and security artifacts). 
• Act as a liaison between application developers and A&A/security teams, ensuring compliance considerations are incorporated into development activities. 
• Track and manage security control implementations and ensure evidence is collected for audits and assessments. 
• Assist in reviewing vulnerability scan results, creating and managing tickets, and working with development teams to prioritize and remediate findings. 
• Support triage and resolution of security vulnerabilities, coordinating with appropriate stakeholders to ensure timely mitigation. 
• Monitor and track system security statuses, POA&M items, and compliance deadlines. 
• Participate in security assessments, audits, and risk reviews as needed. 
• Stay current on cybersecurity best practices, federal security requirements, and vulnerability management processes. 

Qualifications 

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience). 
• 0–2 years of experience in cybersecurity, compliance, or IT-related roles (internships or project-based experience acceptable). 
• Basic understanding of information security concepts (CIA triad, risk management, security controls). 
• Familiarity with A&A or RMF (Risk Management Framework) processes preferred. 
• Strong organizational skills to track system compliance artifacts and manage multiple tickets. 
• Excellent written and verbal communication skills to interact with technical and non-technical stakeholders. 
• Must be able to obtain a Public Trust clearance 
• Knowledge of federal cybersecurity frameworks (NIST SP 800-53, FISMA, FedRAMP). (preferred) 
• Experience with vulnerability scanning tools (e.g., Nessus, Qualys) or ticketing systems (e.g., Jira, ServiceNow). (preferred) 
• Basic understanding of application development processes (Agile/Scrum experience is a plus). (preferred) 
• Security certifications (e.g., Security+, CAP, or other entry-level certifications) are a plus. (preferred)