Cybersecurity Analyst I

General Role Information:

The Cybersecurity Analyst I role is responsible for the analysis and development of the integration, testing, operations, and maintenance of systems security. While the Cybersecurity Analyst I is not expected to know everything about security, they are expected to be able to generalize security concepts, reach out to others to collaborate and share/gain knowledge, and come up with solutions or recommendations for specific cybersecurity problems or issues.

Synonyms: Information Assurance Analyst, Information Security Analyst, Information System Security Analyst, Security Analyst

Specific Duties to Perform:

The Cybersecurity Analyst will support IRS Safeguards computer security reviews of external partner agencies by performing activities including:

1. Support Cybersecurity Reviews of Partner Agencies

As part of a review team, you will:

• Perform basic security checks on systems using provided checklists and scanning tools (like Nessus and government-supplied Safeguard Computer Security Evaluation Matrices (SCSEMs)).

• Help gather and organize documentation from agencies, such as system diagrams and technical questionnaires.

• Join pre-review calls to confirm what systems the agency uses and where Federal Tax Information (FTI) flows.

• Assist in preparing review materials and providing agencies with instructions and reference documents.

• Participate in remote review sessions and help capture test results, notes, and evidence.

• Write up daily status summaries and help compile initial findings at the end of each review.

• Support preparation of the IT security portion of the Safeguard Review Report by uploading findings, scan results, and supporting artifacts.

2. Review Agency Submissions and Provide Feedback

As Agencies send required cybersecurity documents to the IRS Safeguards Program, you will:

• Review corrective action plans (CAPs) and Plans of Action and Milestones (POA&Ms) to confirm whether evidence addresses security findings.

• Review safeguard security reports (SSRs) to check whether agencies describe and implement required security controls.

• Help draft responses to agency questions about security requirements (Technical Inquiries), following established formats and policies.

• Examine notifications about planned changes (e.g., cloud use, contractor access) and document any concerns or required follow-up.

• Upload correspondence, evidence, and analysis into the Safeguards case management system (eCase).

3. Support Technical Inquiry (TI) Responses

You will:

• Read and analyze TI requests from agencies about cybersecurity requirements (e.g., MFA, scanning expectations, cloud configurations).

• Request additional information if the question is unclear or incomplete.

• Draft simple, policy-aligned responses under supervision.

• Document research, decisions, and communications in eCase.

• Upload correspondence, evidence, and analysis into the Safeguards case management system (eCase).

Position Qualifications/Experience:

• 1-3 years of experience in cybersecurity/information security

• Familiarity with cybersecurity frameworks such as FISMA, NIST, IRS Publication 1075

Education/Certifications

• Bachelor’s Degree or higher in computer science, information systems, information security/cybersecurity, or related area, or a suitable combination of work experience and education

• Must hold at least one of the following active certifications (or equivalent):

• CompTIA: Security+, PenTest+, Cloud+, SecurityX (CASP+)

• ISC2: CCSP, SSCP, CGRC (CAP)

• GIAC: GSEC, GCSA

• Other: CISSO (Mile2), FITSP-A (FITSI)

Desired Skillset (Abilities/Competencies)

The ideal candidate must:

• Be highly organized

• Be open to learning new things quickly

• Have excellent verbal and written communication skills

• Have a demonstrated ability to present and communicate cybersecurity concepts to stakeholders

• Have strong technical and critical thinking/analytical skills

• Be comfortable with producing highly detailed and accurate work products

• Be able to work independently and as part of a team

• Be able to manage multiple tasks/projects concurrently

Additional Eligibility Requirements:

100% remote work option is available.

Must use multiple technologies including video/audio conferencing, instant messaging, email, and other options to communicate during business hours.

Occasional overtime may be required in the performance of duties.

Must be proficient with MS Office suite of tools.

Clearance Required: 

To support IRS, the candidate must pass a minimum background investigation for a public trust position.