Security Engineer - Junior

BDR Solutions, LLC, supports the U.S. Federal Government in achieving its mission and goals. They are seeking a motivated Security Engineer to support secure data platform operations within an IRS cloud environment, focusing on implementing security controls and assisting with compliance activities.

Responsibilities:

• Support tenant onboarding security classification activities and technical guardrails implementation
• Assist with security reviews for new data intake requests and Data Sharing Agreement compliance checks
• Support daily security monitoring, IAM entitlement reviews, and alert triage
• Assist with vulnerability scanning coordination and POA&M tracking updates
• Maintain security documentation including Risk Assessment Checklists (RACs) and Non-Disclosure Agreements
• Support preparation of audit evidence packages under direction of Senior Cybersecurity Specialist
• Monitor IRS Security Awareness Training (SAT) compliance for all contractor personnel

Requirements:

• Active MBI required
• 2–4 years in IT security, cloud security, or compliance roles
• CompTIA Security+ required
• Working knowledge of AWS security services: IAM, CloudTrail, Security Hub, GuardDuty
• Familiarity with NIST 800-53 security controls and FedRAMP requirements
• Basic experience with vulnerability scanning tools (Tenable, Qualys, or equivalent)
• Understanding of RBAC and least-privilege access principles
• Bachelor's degree in Cybersecurity, Information Technology, or equivalent experience
• Support tenant onboarding security classification activities and technical guardrails implementation
• Assist with security reviews for new data intake requests and Data Sharing Agreement compliance checks
• Support daily security monitoring, IAM entitlement reviews, and alert triage
• Assist with vulnerability scanning coordination and POA&M tracking updates
• Maintain security documentation including Risk Assessment Checklists (RACs) and Non-Disclosure Agreements
• Support preparation of audit evidence packages under direction of Senior Cybersecurity Specialist
• Monitor IRS Security Awareness Training (SAT) compliance for all contractor personnel
• U.S Citizenship is required
• IRS or federal agency security experience preferred
• CompTIA CySA+ or Cloud+ preferred
• Experience managing POA&M lifecycle beyond basic updates, POA&M management
• Exposure to risk scoring and remediation prioritization frameworks
• Familiarity with automated vulnerability scanning pipelines
• Experience with eMASS or federal ATO processes
• AWS Config/Inspector
• SIEM tools (Splunk, ELK, CloudWatch)
• Identity governance solutions (SailPoint, Okta)
• Data security and PII protection
• Basic scripting or automation skills