Senior Information Security Analyst / Cybersecurity Specialist
Washington D.C.RemoteFull-time
AI Summary
Senior Information Security Analyst who conducts cybersecurity assessments and compliance reviews for IRS Safeguards, evaluating partner agency systems against federal requirements and documenting findings.
About this role
Who we are:
Makpar is a comprehensive professional and technical solutions provider for the Federal government. We combine functional and technical expertise in cloud engineering, data management, cybersecurity and emerging technologies to deliver mission success. We build the right IT solution for government clients by partnering with them to understand their WHAT, WHY, and HOW. Using our signature consulting methodology that we call “The Makpar Way,” we help agencies navigate the ongoing changes in the Federal technology landscape. We succeed where others fail because of our connected and engaged workforce are dedicated to delivering success for our clients and the American people.
Our Mission: We solve complex problems for the Federal government to accelerate access to citizen services.
When it comes to excellence, we deliver. Learn more about our employer brand at makpar.com/careers.
The Senior Information Security Analyst will perform the core cybersecurity assessment and compliance work for IRS Safeguards. The role supports computer security reviews of partner agencies that receive FTI, evaluates agency submissions, performs manual and automated checks, documents findings, and helps assess whether systems meet Publication 1075, NIST, CIS, STIG, and IRS requirements.
Key Responsibilities
• Conduct computer security reviews of partner agency systems that process, store, transmit, or protect FTI.
• Execute system configuration checks and review technical artifacts, policies, procedures, and administrator evidence.
• Support Nessus scans, manual testing, SCSEM completion, and automated evaluation file use.
• Validate in-scope technologies, versions, support status, shared systems, responsible entities, applicable checklists, and FTI system interactions.
• Prepare scope memos, status updates, preliminary findings, technology matrices, AARs, and SRR Section H packages.
• Review CAPs / POA&Ms, SSRs, notifications, and technical inquiries.
• Provide written cybersecurity guidance to partner agencies.
• Apply NIST, IRS Publication 1075, CIS Benchmarks, DISA STIGs, FIPS, OMB A-130, and RMF guidance.
• Execute system configuration checks and review technical artifacts, policies, procedures, and administrator evidence.
• Support Nessus scans, manual testing, SCSEM completion, and automated evaluation file use.
• Validate in-scope technologies, versions, support status, shared systems, responsible entities, applicable checklists, and FTI system interactions.
• Prepare scope memos, status updates, preliminary findings, technology matrices, AARs, and SRR Section H packages.
• Review CAPs / POA&Ms, SSRs, notifications, and technical inquiries.
• Provide written cybersecurity guidance to partner agencies.
• Apply NIST, IRS Publication 1075, CIS Benchmarks, DISA STIGs, FIPS, OMB A-130, and RMF guidance.
Required Qualifications
• High school diploma or higher.
• Demonstrated experience identifying and applying information security or cybersecurity requirements.
• Demonstrated experience ensuring cybersecurity requirements are addressed through development, implementation, and configuration.
• Demonstrated experience implementing security controls, configuration changes, software/hardware updates, vulnerability remediation, and secure configurations.
• At least one of the required PWS-listed certifications, including CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP, CASP+ CE, CCNP Security, CISA, CISSP or Associate, GCED, GCIH, CCSP, CAP, CISM, GSLC, CCISO, HCISPP, CEH, GSNA, CFR, or PenTest+. A minimum two-year IT/cybersecurity program may substitute for certification.
• Ability to complete IRS suitability / staff-like access requirements.
• Demonstrated experience identifying and applying information security or cybersecurity requirements.
• Demonstrated experience ensuring cybersecurity requirements are addressed through development, implementation, and configuration.
• Demonstrated experience implementing security controls, configuration changes, software/hardware updates, vulnerability remediation, and secure configurations.
• At least one of the required PWS-listed certifications, including CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP, CASP+ CE, CCNP Security, CISA, CISSP or Associate, GCED, GCIH, CCSP, CAP, CISM, GSLC, CCISO, HCISPP, CEH, GSNA, CFR, or PenTest+. A minimum two-year IT/cybersecurity program may substitute for certification.
• Ability to complete IRS suitability / staff-like access requirements.
Preferred Qualifications
• Experience securing configurations within Government organizations.
• Prior IRS, Treasury, Safeguards, Publication 1075, FTI, or federal compliance experience.
• Experience with Nessus audit files, SCAP/XCCDF, SCSEMs, CAP/POA&M closure, SSR/system security plans, and technical inquiry responses.
• Experience assessing cloud environments, mainframes, network devices, databases, virtualization, and operating systems.
• Strong technical writing and customer-facing communication skills.
• Prior IRS, Treasury, Safeguards, Publication 1075, FTI, or federal compliance experience.
• Experience with Nessus audit files, SCAP/XCCDF, SCSEMs, CAP/POA&M closure, SSR/system security plans, and technical inquiry responses.
• Experience assessing cloud environments, mainframes, network devices, databases, virtualization, and operating systems.
• Strong technical writing and customer-facing communication skills.
Skills
CAPCIS BenchmarksDISA STIGsFIPSIRS Publication 1075NessusNISTOMB A-130POA&MRMFSCAPSCSEMSSRXCCDF
