Entry Level Cyber Security Associate Jobs
New grad cyber security associate jobs are open to recent graduates and entry level candidates with zero to two years of experience, where a strong portfolio or hands-on internship work can matter more than a long resume. Most openings mix on-site and remote settings across Technology & Software, Healthcare & Medical Services, and Energy, with employers like Deloitte, St. Luke's Health System, and C Spire hiring at this level now.
Find JobsOverview
Showing 5 of 10+ Entry Level Cyber Security Associate jobs
Location: Onsite at location listed in posting
About the role
First Horizon Bank is seeking a cyber security professional, that is ready to develop their potential for and support vulnerability management, application security testing, and penetration testing activities across on-prem and cloud environments. You will help secure the software development lifecycle and protect our associates, our clients, and the data that underpins our financial services.
What you’ll do
-
Vulnerability Management:
Execute recurring vulnerability scans, validate and triage findings, and coordinate remediation with platform/engineering teams; assist with tracking SLAs and reporting on risk reduction.
-
Application Security Testing:
Run Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) scans, review results with developers, and help integrate testing into CI/CD workflows. Apply OWASP Top 10 guidance in collaboration with development teams.
-
Penetration Testing:
Assist with internal web/mobile/API penetration testing and authenticated testing; perform manual verification to reduce false positives and validate risk and impact.
-
Collaboration & Reporting:
Partner with associates across IT, risk, audit, and compliance to align findings and remediation with policies and regulatory expectations. Contribute to clear metrics and dashboards on vulnerabilities and remediation progress.
What you’ll bring (must-have)
- 1–3 years of hands-on experience in one or more of the following: vulnerability management, application security testing (SAST/DAST), or penetration testing for web/mobile/API.
- Working knowledge of the OWASP Top 10 and secure coding fundamentals; ability to explain common issues and remediation approaches to developers.
- Familiarity with the concepts of CI/CD pipelines and integrating security checks into developer workflows.
- Foundational scripting or automation skills to streamline testing and reporting.
- Strong communication and collaboration skills; ability to document findings and work with engineering teams to drive remediation.
Nice to have (not required)
- Exposure to software composition analysis (SCA) and secrets/dependency scanning.
- Experience operating vulnerability scanning platforms and/or AppSec testing tools.
- Cloud security awareness (AWS, Azure, or M365) related to application and vulnerability management workflows.
- Relevant certifications such as Security+, eJPT, eWPT, CEH, or OSCP-in-progress.
- Bachelor’s degree in a related field or equivalent practical experience.
Work style and schedule
- Onsite 5 days per week.
- Participation in an on-call rotation may be requested as you grow in the role.
Why First Horizon Bank
- Protect the trust of our clients by safeguarding critical systems and data in a highly regulated environment.
- Join a collaborative security team focused on measurable outcomes, engineering excellence, and career growth for our associates.
Location: Onsite at location listed in posting
About the role
First Horizon Bank is seeking a cyber security professional, that is ready to develop their potential for and support vulnerability management, application security testing, and penetration testing activities across on-prem and cloud environments. You will help secure the software development lifecycle and protect our associates, our clients, and the data that underpins our financial services.
What you’ll do
-
Vulnerability Management:
Execute recurring vulnerability scans, validate and triage findings, and coordinate remediation with platform/engineering teams; assist with tracking SLAs and reporting on risk reduction.
-
Application Security Testing:
Run Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) scans, review results with developers, and help integrate testing into CI/CD workflows. Apply OWASP Top 10 guidance in collaboration with development teams.
-
Penetration Testing:
Assist with internal web/mobile/API penetration testing and authenticated testing; perform manual verification to reduce false positives and validate risk and impact.
-
Collaboration & Reporting:
Partner with associates across IT, risk, audit, and compliance to align findings and remediation with policies and regulatory expectations. Contribute to clear metrics and dashboards on vulnerabilities and remediation progress.
What you’ll bring (must-have)
- 1–3 years of hands-on experience in one or more of the following: vulnerability management, application security testing (SAST/DAST), or penetration testing for web/mobile/API.
- Working knowledge of the OWASP Top 10 and secure coding fundamentals; ability to explain common issues and remediation approaches to developers.
- Familiarity with the concepts of CI/CD pipelines and integrating security checks into developer workflows.
- Foundational scripting or automation skills to streamline testing and reporting.
- Strong communication and collaboration skills; ability to document findings and work with engineering teams to drive remediation.
Nice to have (not required)
- Exposure to software composition analysis (SCA) and secrets/dependency scanning.
- Experience operating vulnerability scanning platforms and/or AppSec testing tools.
- Cloud security awareness (AWS, Azure, or M365) related to application and vulnerability management workflows.
- Relevant certifications such as Security+, eJPT, eWPT, CEH, or OSCP-in-progress.
- Bachelor’s degree in a related field or equivalent practical experience.
Work style and schedule
- Onsite 5 days per week.
- Participation in an on-call rotation may be requested as you grow in the role.
Why First Horizon Bank
- Protect the trust of our clients by safeguarding critical systems and data in a highly regulated environment.
- Join a collaborative security team focused on measurable outcomes, engineering excellence, and career growth for our associates.
See All 10 Entry Level Cyber Security Associate Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsEntry Level Cyber Security Associate Job Market
Who's Hiring
Top Industries Hiring
- Technology & Software
- Healthcare & Medical Services
- Energy
- Education
- Accounting & Auditing
Entry Level Cyber Security Associate Jobs: Frequently Asked Questions
How do I get an entry level cyber security associate job?
Entry level cyber security associate employers look for candidates who can demonstrate hands-on skills, even without years of work history. A home lab, a completed capture-the-flag challenge, or an internship carries real weight. Certifications like CompTIA Security+ signal foundational knowledge, and tailoring your resume to each posting's specific tools and threat types gives you a clear edge over generic applications.
Which companies hire entry level cyber security associates?
Companies hiring entry level cyber security associates right now include Deloitte, St. Luke's Health System, and C Spire, based on current listings on Migrate Mate as of November 2026. At this level, hiring comes from a wide range of organizations, from large enterprises building out security operations centers to government contractors and managed security service providers that onboard and train junior talent directly.
Are there remote entry level cyber security associate jobs?
Yes, though on-site roles are still common at this stage. About 38% of entry level cyber security associate openings are remote or hybrid as of November 2026, reflecting strong demand for distributed security teams. Many fully remote postings require candidates to be available during core business hours for incident response and team collaboration.
Are these new grad cyber security associate jobs?
Yes, this page includes new grad, recent graduate, and junior cyber security associate roles alongside other entry level postings. A new-grad-friendly posting typically welcomes zero to two years of experience and accepts internships, academic projects, or a strong portfolio in place of full-time work history. Look for language like 'entry level,' 'junior,' or 'recent grads encouraged to apply' in the job description.
Which industries hire the most entry level cyber security associates?
Entry Level cyber security associate roles concentrate in Technology & Software, Healthcare & Medical Services, and Energy, based on current listings on Migrate Mate as of November 2026. These sectors drive junior hiring because they face high volumes of sensitive data, regulatory compliance requirements, and persistent threat activity that make building out entry level security teams a business priority.