Junior Security Engineer

Job Description:

• Implement security controls and technical guardrails within an IRS cloud environment
• Support secure data platform operations and tenant onboarding security classification activities
• Assist with security reviews for new data intake requests and Data Sharing Agreement compliance checks
• Support daily security monitoring, IAM entitlement reviews, and alert triage
• Assist with vulnerability scanning coordination and POA&M tracking updates
• Maintain security documentation, including Risk Assessment Checklists and Non-Disclosure Agreements
• Support preparation of audit evidence packages under the direction of the Senior Cybersecurity Specialist
• Monitor IRS Security Awareness Training compliance for contractor personnel
• Contribute to vulnerability management, IAM governance, continuous monitoring, and federal compliance activities
• Collaborate with senior cybersecurity staff to safeguard sensitive data through access controls and security best practices

Requirements:

• Active MBI required
• U.S. Citizenship required
• 2–4 years in IT security, cloud security, or compliance roles
• CompTIA Security+ required
• CompTIA CySA+ or Cloud+ preferred
• Working knowledge of AWS security services: IAM, CloudTrail, Security Hub, GuardDuty
• Familiarity with NIST 800-53 security controls and FedRAMP requirements
• Basic experience with vulnerability scanning tools such as Tenable or Qualys
• Understanding of RBAC and least-privilege access principles
• Bachelor's degree in Cybersecurity, Information Technology, or equivalent experience
• Eligibility to obtain a government-granted security clearance and access to classified information
• Familiarity with Terraform, Git, and cloud-native security best practices
• U.S. federal government or IRS security experience preferred
• Exposure to POA&M management, risk scoring, automated vulnerability scanning pipelines, eMASS or federal ATO processes, AWS Config/Inspector, SIEM tools, identity governance solutions, data security and PII protection, and basic scripting or automation skills

Benefits: