Junior Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Implement security measures and technical safeguards within an IRS cloud environment.

• Facilitate operations of secure data platforms and assist in tenant onboarding security classification activities.

• Aid in conducting security evaluations for new data intake requests and ensure compliance with Data Sharing Agreements.

• Provide support for daily security monitoring, IAM entitlement assessments, and alert triage.

• Assist in coordinating vulnerability scanning and updating the Plan of Action and Milestones (POA&M).

• Maintain security documentation, including Risk Assessment Checklists and Non-Disclosure Agreements.

• Support the preparation of audit evidence packages under the guidance of the Senior Cybersecurity Specialist.

• Oversee compliance with IRS Security Awareness Training for contractor personnel.

• Contribute to activities related to vulnerability management, IAM governance, continuous monitoring, and federal compliance.

• Work collaboratively with senior cybersecurity personnel to protect sensitive data through access controls and security best practices.

⛳️ Requirements

• Must possess an active MBI.

• U.S. Citizenship is required.

• 2 to 4 years of experience in IT security, cloud security, or compliance roles.

• CompTIA Security+ certification is mandatory.

• CompTIA CySA+ or Cloud+ certification is preferred.

• Familiarity with AWS security services such as IAM, CloudTrail, Security Hub, and GuardDuty.

• Knowledge of NIST 800-53 security controls and FedRAMP requirements is essential.

• Basic experience with vulnerability scanning tools like Tenable or Qualys.

• Understanding of Role-Based Access Control (RBAC) and least-privilege access principles.

• A Bachelor's degree in Cybersecurity, Information Technology, or a related field is required.

• Must be eligible to obtain a government-issued security clearance and have access to classified information.

• Familiarity with Terraform, Git, and cloud-native security best practices is advantageous.

• Prior experience with U.S. federal government or IRS security is preferred.

• Exposure to POA&M management, risk scoring, automated vulnerability scanning pipelines, eMASS or federal ATO processes, AWS Config/Inspector, SIEM tools, identity governance solutions, data security, PII protection, as well as basic scripting or automation skills is beneficial.

🏝️ Benefits

• Comprehensive health insurance plans.

• Retirement savings options with employer matching.

• Opportunities for professional development and certifications.

• Flexible work arrangements.

• Supportive and inclusive work environment.