Senior Information Security Analyst / Cybersecurity Specialist
Makpar•Washington, DC
About The Position
The Senior Information Security Analyst will perform the core cybersecurity assessment and compliance work for IRS Safeguards. The role supports computer security reviews of partner agencies that receive FTI, evaluates agency submissions, performs manual and automated checks, documents findings, and helps assess whether systems meet Publication 1075, NIST, CIS, STIG, and IRS requirements.
Requirements
- High school diploma or higher.
- Demonstrated experience identifying and applying information security or cybersecurity requirements.
- Demonstrated experience ensuring cybersecurity requirements are addressed through development, implementation, and configuration.
- Demonstrated experience implementing security controls, configuration changes, software/hardware updates, vulnerability remediation, and secure configurations.
- At least one of the required PWS-listed certifications, including CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP, CASP+ CE, CCNP Security, CISA, CISSP or Associate, GCED, GCIH, CCSP, CAP, CISM, GSLC, CCISO, HCISPP, CEH, GSNA, CFR, or PenTest+. A minimum two-year IT/cybersecurity program may substitute for certification.
- Ability to complete IRS suitability / staff-like access requirements.
Nice To Haves
- Experience securing configurations within Government organizations.
- Prior IRS, Treasury, Safeguards, Publication 1075, FTI, or federal compliance experience.
- Experience with Nessus audit files, SCAP/XCCDF, SCSEMs, CAP/POA&M closure, SSR/system security plans, and technical inquiry responses.
- Experience assessing cloud environments, mainframes, network devices, databases, virtualization, and operating systems.
- Strong technical writing and customer-facing communication skills.
Responsibilities
- Conduct computer security reviews of partner agency systems that process, store, transmit, or protect FTI.
- Execute system configuration checks and review technical artifacts, policies, procedures, and administrator evidence.
- Support Nessus scans, manual testing, SCSEM completion, and automated evaluation file use.
- Validate in-scope technologies, versions, support status, shared systems, responsible entities, applicable checklists, and FTI system interactions.
- Prepare scope memos, status updates, preliminary findings, technology matrices, AARs, and SRR Section H packages.
- Review CAPs / POA&Ms, SSRs, notifications, and technical inquiries.
- Provide written cybersecurity guidance to partner agencies.
- Apply NIST, IRS Publication 1075, CIS Benchmarks, DISA STIGs, FIPS, OMB A-130, and RMF guidance.
Benefits
- great benefits package
- excellent training and career development opportunities
- flexible work schedules
- generous compensation package
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
High school or GED
