IT Security Engineer, I

IT Security Engineer, I

The Space Telescope Science Institute (STScI) is a multi-mission science operations center for NASA's flagship observatories. Our world-class astronomical research center is based on the Johns Hopkins University Homewood campus in Baltimore, Maryland. This position can support hybrid work. Candidates must reside in or be willing to relocate to our local market (MD, DE, VA, PA, DC & WV). This position requires US Citizenship or Permanent Residence in order to meet ITAR requirements.

The Information Technology Services Division (ITSD) is seeking an Information Technology Security Engineer. This role is instrumental in securing systems and data that support cutting-edge science and engineering as part of the Space Telescope Science Institute's unique role in supporting NASA's space-based observatories.

The ideal candidate will have at least 3 years of cybersecurity experience, though we welcome applicants with strong system administration backgrounds who are passionate about transitioning into security roles.

Key Responsibilities:

• Collaborate with others to design, implement, and maintain effective, mission-aligned information security controls.
• Participate in the Institute's cybersecurity incident response team, supporting investigations and remediation efforts.
• Provide hands-on maintenance and support for both physical and virtual infrastructure with an emphasis on reliability and security.
• Serve as an escalation point for Service Desk tickets involving network and security systems/services.
• Administer and refine the configuration of firewalls, IDS/IPS, EDR platforms, and other security technologies.
• Assist the primary ISSO with ongoing system security documentation updates, including System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and Risk Assessments.
• Contribute to the execution and maintenance of the Continuous Monitoring (ConMon) program by collecting evidence, updating control implementation details, and tracking system status.
• Support the preparation and facilitation of monthly Security Working Group (SWG) meetings, including agenda creation, note-taking, and action item tracking.
• Help ensure compliance with FISMA and NIST SP 800-53 security control requirements through documentation reviews and coordination with system stakeholders.
• Assist in managing and responding to security assessments, audits, and control validation efforts in coordination with the ISSO and technical teams.
• Maintain records of security-related activities in support of the system's Authorization to Operate (ATO) and ongoing compliance lifecycle.
• Engage in a collaborative team environment that values knowledge-sharing, peer mentoring, and continuous learning.
• Entry-level network infrastructure support including troubleshooting connectivity and performance, maintenance, cabling, infrastructure project support, other related duties.

This role may require after-hours and weekend work to accommodate incident response activities, mission schedules and highly-available services typical of a cybersecurity role.

Required Qualifications:

• A minimum of 2-3 years of technical experience in cybersecurity, or equivalent experience with a strong foundation in systems and/or network administration.
• Practical experience supporting:
• Diagnostic tools including packet capture, command-line analysis, and log parsing.
• Splunk or similar SOAR/SIEM solutions.
• Hands-on experience with endpoint detection and response (EDR) solutions.
• System administration skills across multiple platforms (Linux, Windows, macOS).
• Active security domain certification (e.g. CompTIA Security+, CEH or equivalent DoD 8140 basic certification).
• Solid grasp of networking architectures, protocols, and security principles.
• Strong written and verbal communication skills, especially when working across technical and non-technical teams.
• Self-motivated with the ability to prioritize and complete tasks independently.

Preferred/Desirable Qualifications:

• Entry-level implementation of automation approaches using scripting (Python, shell), and APIs.
• Experience with:
• IDS/IPS systems
• Incident response and digital forensics
• Working knowledge of FISMA and NIST compliance frameworks
• Security monitoring and reporting tools
• Wireless and wired network security
• DNS, proxies, DLP, and Zero Trust architectures
• Implementing IAM solutions, such as Cisco Duo.
• PKI and certificate services.
• Cloud security experience (especially with AWS, including IAM, EC2, VPC, KMS, CloudFormation/Terraform).
• Supporting users and systems in a highly technical, research-intensive environment.

Salary range $70k - $80k.

To apply: Please upload a resume, cover letter and online application using this link: IT Security Engineer, I

Applications received by 11/28/2025 will receive full consideration. Applications received after this date will be considered until the position is filled.

Equal Opportunity Employer This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.