About Careertakes

👉 Important disclosure: Careertakes is a third-party recruiting platform supporting this hiring process. If selected, you will be employed directly by our client, IT.

Applicants for this role may also receive access to additional matched opportunities through the Careertakes platform.

---

What You’ll Do

This role is an operational, hands-on cybersecurity position designed for an early-career professional who wants structured mentorship and clear paths for technical growth. You will work on a hybrid schedule (remote flexibility plus regular on-site collaboration) and support a broad cybersecurity program for a confidential client in the IT sector.

• Run scheduled and ad-hoc vulnerability scans (examples: Rapid7 InsightVM, Tenable Nessus), validate credentialed-scan coverage, and prepare findings for risk-based prioritization.
• Track remediation through to closure—open and update tickets with IT, infrastructure, application, and vendor owners; validate fixes; escalate stalled items.
• Perform first-level triage for security alerts, user-reported phishing, and managed service escalations; gather context and escalate per runbook criteria.
• Support data protection and identity tasks: initial triage of DLP alerts (Microsoft Purview, Varonis), periodic access/privileged-access reviews, and cleanup of stale accounts.
• Own intake and coordination of cybersecurity request queues (exception requests, security reviews, vendor questionnaires, app requests); prepare submissions for senior review.
• Maintain security tooling health and coverage (EDR, device management, logging agents); produce recurring metrics, dashboards, and runbooks.
• Support the security awareness and phishing simulation program.
• Participate in incident response: evidence/log collection, documentation, and directed containment tasks in coordination with privacy and compliance teams.
• Join the on-call rotation after an initial ramp period (shared rotation; typically ~once every two months) with senior support during incidents.
• Pursue certifications, cross-training, and progressive ownership—this role is structured to build technical depth and career progression.

---

Qualifications

Education, training, and certifications

• Associate’s or Bachelor’s degree in Cybersecurity, IT, or related field preferred; equivalent professional experience, military experience, or certifications accepted.
• Foundational security certification strongly preferred (CompTIA Security+, (ISC)² SSCP, CompTIA CySA+). Candidates hired without one should plan to obtain a qualifying certification within 12 months. Progress toward Microsoft SC‑900/SC‑200/AZ‑500 is supported.

Experience and technical knowledge

• 1–3 years in IT, service desk, systems or network administration, or cybersecurity with hands-on security exposure; internships, military, or substantive home lab work considered.
• Solid grasp of core cybersecurity concepts: defense-in-depth, least privilege, risk-based prioritization, CVSS, MITRE ATT&CK concepts, NIST CSF, and HIPAA awareness for ePHI protection.
• Working knowledge of Windows and Linux, Active Directory / Microsoft Entra ID concepts, and networking fundamentals (TCP/IP, DNS, firewalls, VPN, proxies).
• Exposure to scripting (PowerShell, Python) and ITSM tools (ServiceNow) is a plus.
• Familiarity with enterprise security tooling categories (EDR, SIEM, vulnerability scanning, email security, DLP, cloud security) and hands-on experience with at least one.

Skills and attributes

• Genuine passion for cybersecurity and dedication to continuous learning.
• Strong follow-through and ownership; ability to drive cross-team work to completion.
• Comfortable in a fast-paced environment with shifting priorities.
• Clear written communication, disciplined documentation habits, attention to detail, and discretion with confidential information.

---

Logistics & Compensation

• Employment type: Contractor (with Full-Time engagement) — confirm specifics during the hiring process with Careertakes.
• Work model: Hybrid (remote flexibility plus regular on-site presence).
• Estimated compensation (as listed by source): $135,932 per year (estimated). Final compensation will be set by the confidential client and may vary based on experience, location, and role specifics.
• Location: Morristown, NJ (on-site collaboration expected per hybrid schedule).

---

Why This Role?

• Structured mentorship from senior engineers and strong exposure across a mature cybersecurity program.
• Clear development pathway to progress technical ownership and certifications.
• Meaningful hands-on work across vulnerability management, incident response, data protection, and security tooling.

---

Equal Opportunity & Hiring Transparency

Careertakes and our client are Equal Opportunity Employers committed to building a diverse and inclusive workforce. We prohibit discrimination or harassment of any kind. To support a fair and efficient hiring process, AI tools may be used to assist with application review or resume screening. These tools do not replace human decision-making. Final hiring decisions are made by people.

If you have questions about how your data is used, please contact us directly.