Cybersecurity Analyst

About the Organization JSL delivers customer-centric IT solutions for Federal, State and local governments. We offer our customers three distinct advantages: expertise in our service offerings, leadership that drives innovation, and a culture focused on customer satisfaction. Our mission is to cultivate relationships, responsibility and results through people, purpose and process.

Description General Role Information

The Cybersecurity Analyst I role is responsible for the analysis and development of the integration, testing, operations, and maintenance of systems security. While the Cybersecurity Analyst I is not expected to know everything about security, they are expected to be able to generalize security concepts, reach out to others to collaborate and share/gain knowledge, and come up with solutions or recommendations for specific cybersecurity problems or issues.

Synonyms:
Information Assurance Analyst, Information Security Analyst, Information System Security Analyst, Security Analyst

Specific Duties to Perform Support Cybersecurity Reviews of Partner Agencies

As part of a review team, you will:

• Perform basic security checks on systems using provided checklists and scanning tools (like Nessus and government-supplied Safeguard Computer Security Evaluation Matrices (SCSEMs)).
• Help gather and organize documentation from agencies, such as system diagrams and technical questionnaires.
• Join pre-review calls to confirm what systems the agency uses and where Federal Tax Information (FTI) flows.
• Assist in preparing review materials and providing agencies with instructions and reference documents.
• Participate in remote review sessions and help capture test results, notes, and evidence.
• Write up daily status summaries and help compile initial findings at the end of each review.
• Support preparation of the IT security portion of the Safeguard Review Report by uploading findings, scan results, and supporting artifacts.

Review Agency Submissions and Provide Feedback

As Agencies send required cybersecurity documents to the IRS Safeguards Program, you will:

• Review corrective action plans (CAPs) and Plans of Action and Milestones (POA&Ms) to confirm whether evidence addresses security findings.
• Review safeguard security reports (SSRs) to check whether agencies describe and implement required security controls.
• Help draft responses to agency questions about security requirements (Technical Inquiries), following established formats and policies.
• Examine notifications about planned changes (e.g., cloud use, contractor access) and document any concerns or required follow-up.
• Upload correspondence, evidence, and analysis into the Safeguards case management system (eCase).

Support Technical Inquiry (TI) Responses

You will:

• Read and analyze TI requests from agencies about cybersecurity requirements (e.g., MFA, scanning expectations, cloud configurations).
• Request additional information if the question is unclear or incomplete.
• Draft simple, policy-aligned responses under supervision.
• Document research, decisions, and communications in eCase.
• Upload correspondence, evidence, and analysis into the Safeguards case management system (eCase).

Position Qualifications/Experience

• 1-3 years of experience in cybersecurity/information security
• Familiarity with cybersecurity frameworks such as FISMA, NIST, IRS Publication 1075

Education/Certifications

• Bachelor’s Degree or higher in computer science, information systems, information security/cybersecurity, or related area, or a suitable combination of work experience and education
• Must hold at least one of the following active certifications (or equivalent):
• CompTIA:
  Security+, Pen Test+, Cloud+, SecurityX (CASP+)
• ISC2: CCSP, SSCP, CGRC (CAP)
• GIAC: GSEC, GCSA
• Other: CISSO (Mile2), FITSP-A (FITSI)

De…