Critical Infrastructure Cyber Protection & Defense Analyst

Idaho National Laboratory•Idaho Falls, ID

About The Position

Idaho National Laboratory is hiring a Critical Infrastructure Cyber Protection & Defense Analyst for its Infrastructure & Operations team. The role provides cybersecurity consulting and technical expertise to advance cybersecurity for industrial control systems (ICS) and critical infrastructure. It includes supporting cybersecurity design and implementation, identifying vulnerabilities, and developing mitigation techniques to help protect critical infrastructure from current and emerging threats. The analyst monitors critical infrastructure sector networks to identify and remediate unauthorized activity, responds to urgent threats and crises, and develops advanced mitigation, preparedness, response, and recovery approaches. The role leads cybersecurity efforts and delivers capabilities to customers; gathers and analyzes information about U.S. critical infrastructure, particularly control systems and technology-controlled processes; manages teams producing cybersecurity products; and conducts technical analysis projects. The analyst also creates reports and briefings and develops products to address situational-awareness gaps and the needs of federal, private, and international customers across multiple classification levels. This is a multi-level, project-hire position with an estimated duration of approximately one year. The position is based at the REC facility and follows a 9x80 schedule, with every other Friday off. Remote or hybrid work opportunities may be available. Work may require more than eight hours per day, irregular hours, and working alone. The role requires obtaining and maintaining a DOE Q security clearance and special access as required, and may involve handling, storing, and processing classified and CUI information in a secure work environment. It is a testing-designated position requiring pre-employment and periodic drug testing. The employee must complete role-specific security and privacy training, sign required access agreements, and comply with applicable information security and privacy policies and procedures.

Requirements

Bachelor of Science degree in mechanical engineering, electrical engineering, cybersecurity, computer sciences, and/or business or financial management from an accredited institution, with education and experience commensurate with level.
Level 2: bachelor's degree and 2 years of experience; master's degree and 0 years; or Ph.D. and 0 years.
Level 3: bachelor's degree and 5 years of experience; master's degree and 2 years; or Ph.D. and 2 years.
Relevant experience designing or applying control-systems cybersecurity solutions in critical infrastructure at the system and/or regional level.
Must obtain and maintain a DOE Q security clearance and special access as required; must be eligible for a DOE Q clearance and SCI access.
Must be a U.S. citizen.
Ability to work under pressure, manage multiple complex tasks and commitments simultaneously, maintain work quality, and interact professionally.
Ability to work in a secure environment and handle, store, or process classified and CUI information when required, while following physical and electronic protection standards.
Ability to work more than 8 hours per day, irregular hours, and alone.
Sufficient visual acuity and hearing capacity to perform essential functions and interact with people.
Must submit to a pre-employment drug screen and periodic drug testing.

Nice To Haves

Professional Engineer certification.
Certified Information Systems Security Professional (CISSP) certification.
Relevant program or project management experience at INL, particularly in cybersecurity.
Familiarity with industrial control systems.
In-depth knowledge of the U.S. energy sector.
Experience working with DOE, DOD, DHS, and private industry on grid-security projects.

Responsibilities

Provide professional advice, expertise, strategic insight, and cybersecurity consulting services to advance ICS cybersecurity for critical infrastructure.
Advise on cybersecurity design and implementation, vulnerability identification, and mitigation techniques and procedures.
Monitor critical infrastructure sector networks and actively remediate unauthorized activities.
Respond to crises or urgent situations in critical infrastructure sectors to mitigate immediate and potential threats.
Develop, research, and apply mitigation, preparedness, response, and recovery approaches to support life safety, property preservation, and information security.
Lead cybersecurity efforts and deliver capabilities to customers.
Promote open communication and teamwork with internal and external stakeholders at all levels.
Collect and analyze information about U.S. critical infrastructure, particularly control systems and technology-controlled processes.
Manage teams creating cybersecurity products.
Create reports and provide briefings related to critical infrastructure cybersecurity issues.
Conduct technical analysis projects.
Identify gaps in situational awareness across sectors and develop products for diverse customers across multiple classification levels, including federal, private, and international organizations.
Perform other duties as assigned.
Complete initial and annual role-specific security and privacy training, sign required access agreements, and comply with applicable information security and privacy policies and procedures.