Junior Security Engineer

Job Overview Job order - J0626-0204 - Permanent Full Time Title Junior Security Engineer Category Cyber Security City Lafayette, Louisiana, United States Advance your career as a Security Engineer on a technical DevSecOps team responsible for engineering secure-by-design infrastructure, applications, and automation. You will build, implement, and integrate security capabilities that protect complex enterprise systems—focusing on secure architecture, system hardening, tooling, and automation rather than monitoring or compliance operations. If you excel at designing secure systems, embedding controls into pipelines, and developing engineering solutions that measurably strengthen security, this role offers a deep technical career path. This position is located in our Lafayette, Louisiana or Knoxville, TN office; however, a hybrid working model is acceptable. Due to the nature of government projects, US citizenship is required. Responsibilities Design, implement, and integrate security tools, controls, and architectures across applications, infrastructure, and CI/CD environments. Harden operating systems, networks, application stacks, and pipeline components using secure configuration baselines and automated policy enforcement. Develop scripts and automation to detect misconfigurations, enforce security standards, and validate secure deployments. Engineer and embed automated security scanning and guardrails directly into CI/CD workflows. Collaborate with development, DevOps, and infrastructure teams to embed security‑by‑design into new features, services, and system changes. Support incident response activities at a technical level, including log analysis, containment engineering, and root‑cause identification. Implement and maintain integrations for vulnerability scanning, code scanning, and privileged access tooling. Document security architectures, engineering decisions, configurations, and remediation actions. Evaluate emerging threats and technologies and recommend engineering enhancements to improve platform resilience. Contribute to continuous improvement by identifying opportunities to automate, strengthen, or modernize security controls. Qualifications Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field (or equivalent experience). 0‑5 years of hands‑on engineering experience in security, systems, infrastructure, or DevSecOps. Technical background in networking, operating systems, scripting, and infrastructure design. Experience engineering or integrating security tools (e.g., Qualys, AppScan, SonarQube, Splunk, CyberArk). Experience with CI/CD systems and integrating automated scanning or guardrails. Ability to write scripts (PowerShell, Bash, Python) to automate security controls. Strong problem‑solving skills and ability to engineer solutions to technical security problems. Eligibility for federal background investigation and ability to meet security requirements. Experience with cloud platform security (Azure/AWS). Experience engineering container or Kubernetes security controls. Knowledge of zero‑trust engineering principles. Experience with infrastructure‑as‑code (Terraform, ARM/Bicep). Relevant certifications (e.g., GSEC, GCIA, CySA+, cloud security certifications). Benefits Competitive compensation. Comprehensive insurance options. Matching contributions through the 401(k) plan and the share purchase plan. Paid time off for vacation, holidays, and sick time. Paid parental leave. Learning opportunities and tuition assistance. Wellness and Well‑being programs. Equal Employment Opportunity Qualified applicants will receive consideration for employment without regard to their race, ethnicity, ancestry, color, sex, religion, creed, age, national origin, citizenship status, disability, pregnancy, medical condition, military and veteran status, marital status, sexual orientation or perceived sexual orientation, gender, gender identity, and gender expression, familial status or responsibilities, reproductive health decisions, political affiliation, genetic information, height, weight, or any other legally protected status or characteristics to the extent required by applicable federal, state, and/or local laws where we do business. CGI provides reasonable accommodations to qualified individuals with disabilities. If you need an accommodation to apply for a job in the U.S., please email the CGI U.S. Employment Compliance mailbox at View email address on click.appcast.io . You will need to reference the Position ID of the position in which you are interested. Your message will be routed to the appropriate recruiter who will assist you. All CGI offers of employment in the U.S. are contingent upon the ability to successfully complete a background investigation. Background investigation components can vary dependent upon specific assignment and/or level of US government security clearance held. Dependent upon role and/or federal government security clearance requirements, and in accordance with applicable laws, some background investigations may include a credit check. CGI will consider for employment qualified applicants with arrests and conviction records in accordance with all local regulations and ordinances. CGI will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with CGI’s legal duty to furnish information. #J-18808-Ljbffr