Journeyman Information Security Analyst

This position is for a proposal and Letter of Intent is required

Knowledge Management, Inc. (KMI) has the leadership and experience to deliver innovative technology, logistics and management solutions to meet real mission requirements. KMI is a Minority Business Enterprise (MBE) and Small Disadvantage Business (SDB) that specializes in Logistics, Warehouse Services, Distance Learning/Training, Enterprise Solutions, Financial Management Support, Program Management, Intelligence Analysis & Threat Assessment, and Data Analytics/Operations Research. Since 1998, our solutions and services have helped our clients improve performance, drive cost and operational effectives, and map technology needs for tomorrow's requirements.

Title: Journeyman Information Security Analyst

Location: Remote with occasional on-site support at IRS facilities (e.g., New Carrollton, MD or Washington, DC area)

Position: 1

Duration: 6 month base with 2 3-month options

Start date: ASAP

Security Clearance: IRS Moderate Risk Public Trust (Background Investigation required)

Salary: Please provide your salary requirement, C2C or 1099 hourly rate

Education/Experience: Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field

Certifications: Security+ CE certification required, Higher-level certifications preferred (e.g., CISSP, CISM, CEH, CAP)

Position Summary

The Journeyman Information Security Analyst will perform hands-on security assessments, vulnerability management, and incident response for IRS FISMA-compliant systems. This role supports the execution of annual security control assessments (ASCAs), security assessments and authorizations (SA&As), and event-driven SCAs, validating NIST SP 800-53 controls across moderate-impact environments. The analyst will utilize tools like Qmulos for assessments, ServiceNow for artifact tracking, and contribute to automation of 20+ controls, while updating policies and procedures as needed.

Required Qualifications

• 5 to 8 years of progressively responsible experience in information security, cyber risk management, or IT security operations
• At least 3 years of hands-on experience in system security analysis, vulnerability management, or incident response within a Federal Information Systems Security or equivalent enterprise environment
• Knowledge of FISMA, NIST Special Publications, OMB, Risk Management Framework (RMF), and ISCM Plan development
• IT security knowledge with professional certifications from ISC2, ISA, PMI, CompTIA, or SANS Institute
• Knowledge and experience with technology risk assessments covering Webservices, network appliances, and software
• Knowledge and experience with cloud systems, CSPs, and FedRAMP requirements

Security Clearance

• IRS Moderate Risk Public Trust (Background Investigation required)

Location

• Remote with occasional on-site support at IRS facilities (e.g., New Carrollton, MD or Washington, DC area)

Education

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field

Preferred Qualifications

• Security+ CE certification required
• Higher-level certifications (e.g., CISSP, CISM, CEH, CAP)
• Knowledge of the IRS infrastructure, technologies, and general support systems
• Knowledge and experience with the IRS Enterprise Lifecycle and OneSDLC
• Knowledge of System Interconnections including VPN and other encryption technologies
• Knowledge of IRS Business Units and IT enterprise processes
• Knowledge/experience with Qmulos Q-Compliance, SharePoint, Scanning tools, ServiceNow GRC, SPLUNK
• Knowledge and experience with security architecture principles and system modeling
• Experience proposing AI-powered solutions for technical and non-technical problems

Benefits: All full-time employees are eligible to participate in our benefits programs:

• Health, dental, and vision insurance
• 401(k) retirement plan
• Paid time off (PTO) and holidays
• Group Term Life and Accidental Death and Dismemberment Insurance
• Voluntary Term Life Insurance
• Short and Long-term disability insurance

Equal Employment Opportunity Statement. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

E-Verify Statement. Knowledge Management, Inc. participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. If E-Verify cannot confirm that you are authorized to work, KMI is required to give you written instructions and an opportunity to contact Department of Homeland Security (DHS) or Social Security Administration (SSA) so you can begin to resolve the issue before the employer can take any action against you, including terminating your employment. Employers can only use E-Verify once you have accepted a job offer and completed the Form I-9.

Pay Transparency Non-Discrimination Provision. Knowledge Management, Inc. will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c)

Disability Statement. If you have a disability and need reasonable accommodation or assistance at any point in the application or onboarding process, please email us at .