Junior Cloud DevSecOps Engineer

Junior Cloud DevSecOps EngineerWe are seeking a Junior Cloud DevSecOps Engineer to support a NASA program as part of a contractor cloud security and operations team. This role assists in monitoring, investigating, securing, and supporting cloud infrastructure across Microsoft Azure, Amazon Web Services (AWS), and enterprise environments. This is an entry level position ideal for someone with foundational cybersecurity, cloud, or IT experience who wants to grow in cloud security operations, DevSecOps practices, incident response, automation, and federal cybersecurity compliance.Work Location: On site or hybrid (based on contract requirements) DMV area (DC, Maryland, Virginia)Schedule: Full time May include shift coverage or on call support depending on mission needsWhat You Will Do:Security Operations and MonitoringMonitor security alerts from cloud and enterprise security tools across AWS and AzurePerform initial triage and analysis of suspicious activityEscalate incidents following defined NASA program proceduresAssist with incident response activities including containment and remediationDocument incidents, findings, and response actions clearly and accuratelySupport log review and event correlation across cloud and on-premise systemsAzure Cloud Security SupportAssist with monitoring Microsoft Defender for Cloud recommendations and alertsSupport identity and access monitoring in Microsoft Entra IDHelp validate MFA, Conditional Access, and role based access control configurationsAssist with cloud security posture checks across Azure subscriptionsSupport Azure Policy and security baseline validation activitiesAWS Cloud Security SupportAssist with monitoring AWS Security Hub, GuardDuty, CloudTrail, and AWS Config alertsSupport IAM reviews including role based access and least privilege validationHelp validate encryption settings for S3, EBS, and other AWS servicesAssist with reviewing logging configurations and audit trailsSupport remediation tracking for AWS security findingsDevSecOps and Automation SupportAssist with integrating security checks into CI/CD pipelinesSupport review of Infrastructure as Code templates (Terraform, ARM, CloudFormation)Help identify misconfigurations in development and staging environmentsAssist with basic automation scripting using PowerShell, Python, or BashSupport secure configuration validation as part of release processesSIEM and Log ReviewReview security logs and alerts using Microsoft Sentinel, AWS logging services, or similar SIEM platformsAssist with basic KQL query building and alert tuningSupport threat hunting activities under senior analyst guidanceHelp correlate identity, endpoint, and cloud eventsVulnerability and Compliance SupportSupport vulnerability scanning and remediation tracking across AWS and Azure environmentsAssist with patch compliance reporting and baseline configuration checksHelp maintain security documentation supporting federal compliance requirementsSupport audits and security assessments as neededAssist with alignment to NIST SP 800 53, NIST Cybersecurity Framework, and related federal standardsMinimum Qualifications:Associate degree in Cybersecurity, Information Technology, Computer Science, or related field OR equivalent hands on experience in IT support, systems administration, cybersecurity, or cloud support0 to 2 years of experience in IT, cybersecurity, SOC operations, cloud support, or DevOpsFamiliarity with Microsoft Azure and Amazon Web Services fundamentalsBasic understanding of: Microsoft Entra ID (Azure AD) AWS IAM, MFA and access control, Security monitoring and alert triage, Networking fundamentals (DNS, TCP IP, firewalls), Cloud shared responsibility modelStrong written and verbal communication skillsAbility to obtain and maintain a US government security clearanceUS citizenship required (typical for NASA contract roles)Preferred Qualifications:Experience with Microsoft Sentinel and basic KQLFamiliarity with Microsoft Defender for Cloud, Defender for Endpoint, Microsoft Defender XDR, AWS Security Hub, or GuardDutyExposure to Infrastructure as Code (Terraform, ARM, CloudFormation)Basic PowerShell, Python, or Bash scripting experienceExposure to NIST frameworks such as NIST SP 800 53 or NIST Cybersecurity FrameworkCertifications such as: AZ 900 SC 900 AWS Cloud Practitioner CompTIA Security PlusWhat We Offer:Opportunity to support a NASA mission focused environmentMentorship and training from senior cloud security and DevSecOps professionalsCertification support (based on contract)Competitive salary and benefits packageLife and Accidental Death & Dismemberment (AD&D) coverage as well as Short Term Disability (STD) and Long Term Disability (LTD) insuranceMedical InsuranceDental InsuranceComp/flex timePaid VacationPaid HolidaysPaid Sick Days401k Retirement Plan