安全工程师 - 初级
Security Engineer - Junior
描述
关于公司：
BDR Solutions, LLC（BDR）为美国联邦政府成功实现其使命和目标提供支持。我们的服务和解决方案交付始于理解每个客户的目标状态，然后无缝集成到每个机构的组织中，以改进和增强业务和技术运营及部署。
（鼓励军人申请）
职位概述：
BDR Solutions LLC 正在寻找一位积极进取的安全工程师，以支持 IRS 云环境中的安全数据平台运行。该职位专注于实施安全控制、支持租户上线，并协助进行与联邦标准一致的持续监控和合规活动。理想的候选人应具备云计算和 IT 安全的基础经验，熟悉 AWS 安全服务，并了解 NIST 800-53 和 FedRAMP 要求。
在此职位上，您将参与安全审查、漏洞管理、IAM 治理和审计支持，确保遵守既定政策和时间表。您将与高级网络安全人员合作，维护文档，支持合规工作，并通过强大的访问控制和安全最佳实践来保护敏感数据。
职责：
- 需要活跃的 MBI
- 有 IRS 或联邦机构安全经验者优先
- 2–4 年 IT 安全、云安全或合规相关工作经验
- 需要 CompTIA Security+；CompTIA CySA+ 或 Cloud+ 优先
- 熟悉 AWS 安全服务：IAM、CloudTrail、Security Hub、GuardDuty
- 熟悉 NIST 800-53 安全控制和 FedRAMP 要求
- 具备基本的漏洞扫描工具使用经验（如 Tenable、Qualys 或同等工具）
- 了解 RBAC 和最小权限访问原则
- 信息安全、网络安全或相关领域的学士学位或同等经验
所需最低资格：
- 支持租户上线的安全分类活动和技术防护措施实施
- 协助新数据接入请求的安全审查和数据共享协议合规检查
- 支持日常安全监控、IAM 权限审查和警报分析
- 协助漏洞扫描协调和 POA&M 跟踪更新
- 维护安全文档，包括风险评估检查表（RACs）和保密协议
- 在指导下支持审计证据包的准备
查看英文原文
Description
About us:
BDR Solutions, LLC, (BDR) supports the U.S. Federal Government in successfully achieving its mission and goals. Our service and solution delivery starts with understanding each client’s end-state, and then seamlessly integrating within each Agency’s organization to improve and enhance business and technical operations and deployments.
(Military Veterans are highly encouraged to apply)
Role Overview:
BDR Solutions LLC is seeking a motivated Security Engineer to support secure data platform operations within an IRS cloud environment. This role focuses on implementing security controls, supporting tenant onboarding, and assisting with continuous monitoring and compliance activities aligned with federal standards. The ideal candidate will have foundational experience in cloud and IT security, working knowledge of AWS security services, and familiarity with NIST 800-53 and FedRAMP requirements.
In this role, you will contribute to security reviews, vulnerability management, IAM governance, and audit support, ensuring adherence to established policies and timelines. You will collaborate with senior cybersecurity staff to maintain documentation, support compliance efforts, and help safeguard sensitive data through strong access controls and security best practices.
Responsibilities:
- Active MBI required
- IRS or federal agency security experience preferred
- 2–4 years in IT security, cloud security, or compliance roles
- CompTIA Security+ required; CompTIA CySA+ or Cloud+ preferred
- Working knowledge of AWS security services: IAM, CloudTrail, Security Hub, GuardDuty
- Familiarity with NIST 800-53 security controls and FedRAMP requirements
- Basic experience with vulnerability scanning tools (Tenable, Qualys, or equivalent)
- Understanding of RBAC and least-privilege access principles
- Bachelor's degree in Cybersecurity, Information Technology, or equivalent experience
Required Minimum Qualifications:
- Support tenant onboarding security classification activities and technical guardrails implementation
- Assist with security reviews for new data intake requests and Data Sharing Agreement compliance checks
- Support daily security monitoring, IAM entitlement reviews, and alert triage
- Assist with vulnerability scanning coordination and POA&M tracking updates
- Maintain security documentation including Risk Assessment Checklists (RACs) and Non-Disclosure Agreements
- Support preparation of audit evidence packages under direction of Senior Cybersecurity Specialist
- Monitor IRS Security Awareness Training (SAT) compliance for all contractor personnel
- Clearance Required: Minimum Background Investigation (MBI) — ACTIVE
Tools and Platforms:
- AWS security services (IAM, GuardDuty, Security Hub, CloudTrail, Config),
- Vulnerability scanning tools (Tenable, Qualys)
- SIEM platforms (Splunk, ELK, CloudWatch)
- Compliance tools (eMASS, Archer)
- Identity solutions (Okta, SailPoint)
- Familiarity with Terraform, Git, and cloud-native security best practices.
Clearance Required: Minimum Background Investigation (MBI) — ACTIVE
Nice to Have Qualifications:
- Experience managing POA&M lifecycle beyond basic updates, POA&M management
- Exposure to risk scoring and remediation prioritization frameworks
- Familiarity with automated vulnerability scanning pipelines
- Experience with eMASS or federal ATO processes
- AWS Config/Inspector
- SIEM tools (Splunk, ELK, CloudWatch)
- Identity governance solutions (SailPoint, Okta)
- Data security and PII protection
- Basic scripting or automation skills.
In addition, U.S Citizenship is required. Select applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information and be able to obtain a government-granted security clearance. Individuals may also be subject to a background investigation including, but not limited to criminal history, employment and education verification, drug testing, and creditworthiness.
This position is contingent upon contract award. Employment is not guaranteed and will proceed only if the associated contract is awarded and funded.
The compensation range for this position is $60,000-110,000. Compensation decisions depend on a wide range of factors, including but not limited to location, skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.
Originally posted on Himalayas