About The Position
Seeking a motivated entry-level Cyber Security Professional to support the implementation and maintenance of NIST Risk Management Framework (RMF) requirements and common control boundaries across our enterprise. This role is an excellent opportunity for early-career professionals who enjoy research, structured writing, and learning new cybersecurity disciplines. The successful candidate will work closely with experienced cybersecurity staff and receive mentorship in Department of Energy (DOE) to include National Nuclear Security Administration (NNSA) and Environmental Management (EM) cybersecurity policies, standards, and governance processes. Under regular supervision, assists with the investigation, design, and development of software and/or hardware security. Support the security of SRS resources through designing/implementing/evaluating measures tied to the NIST Core Cyber. Framework: Identify, Detect, Respond and Recover.
Requirements
- Strong written communication and composition abilities
- Knowledge of basic cybersecurity principles, protections, or frameworks (e.g., NIST).
- Demonstrated willingness to learn new technologies, frameworks, and regulatory environments.
- Strong research and analytical skills.
- Attention to detail and a commitment to maintaining high standards of security
- Candidate must be able to obtain and maintain a DOE “Q” security clearance.
- Exposure to NIST SP 800-series guidance or the Risk Management Framework (RMF).
Nice To Haves
- Clearance “Q” preferred.
- Subcontractor must have an active eFOCI and approved Facility Level Clearance with DOE / NNSA
- Experience supporting cyber security concepts such as categorization, control selection, implementation, assessment, authorization, and continuous monitoring
- Familiarity with governance, compliance, or technical documentation
- Candidates who have possessed an active DOE clearance (L or Q) within the past two (2) years.
Responsibilities
- Must be familiar with available resource materials and be able to conduct timely research.
- Assist in developing, documenting, and maintaining common control implementations and associated artifacts.
- Support activities related to the NIST RMF lifecycle, including categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
- Conduct in-depth research on cybersecurity policies, NIST guidance, DOE/NNSA directives, and industry best practice.
- Prepare and update security documentation such as control implementation summaries, procedures, and system security artifacts.
- Collaborate with senior cybersecurity staff to ensure consistent application of cybersecurity requirements.
- Participate in internal assessments, gap analyses, and compliance reviews.
- Ability to work on-site with limited teleworking options.
- Obtain safety training, obey safety rules and make safety an integral part of each task.
- Take the necessary steps to stop work if continuing the job is unsafe or will create an unsafe condition.
- Under regular supervision, assists with the investigation, design, and development of software and/or hardware security technologies for SRS.
- Work with vendors to develop technical solutions for site computer security needs.
- Maintain the integrity of computer workstations, servers, and networks by maintaining access controls and software lifecycle process as needed.
- Ensure data integrity and confidentiality through implementing the use of both encryption and data retention technologies.
- Increase technical abilities through specialized vendor training, manuals and technical journals, software seminars, informational meetings, and practical experience.
- Ensure that site/company policies and procedures are tied to customer requirements and our evaluated for effectiveness and proper implementation.
- Must be able to participate in group problem solving including communicating effectively with both technical and nontechnical personnel, respect the ideas of others and accept the judgment of the group.
- Must have a sense of when to ask for help and be comfortable in accepting guidance from other more senior technical personnel.
Benefits
- Specialized vendor training
- Manuals and technical journals
- Software seminars
- Informational meetings
- Practical experience
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
