Critical Infrastructure Cyber Protection & Defense Analyst
About The Position
Idaho National Laboratory is hiring a Critical Infrastructure Cyber Protection & Defense Analyst for its Infrastructure & Operations team. The role provides cybersecurity expertise, consulting, and strategic insight to advance industrial control systems (ICS) cybersecurity for critical infrastructure. The analyst helps secure critical infrastructure systems against current and emerging threats through cybersecurity design, implementation, vulnerability identification, and mitigation approaches. The position includes monitoring critical infrastructure sector networks, responding to urgent situations, developing mitigation and recovery approaches, leading cybersecurity efforts, managing teams creating cybersecurity products, and conducting technical analysis. The analyst collects and analyzes information about U.S. critical infrastructure, particularly control systems and technology-controlled processes, and develops products to address situational-awareness gaps for federal, private, and international customers across multiple classification levels. The role also creates reports and delivers briefings. This is a multi-level, project-hire position with an estimated duration of approximately one year. Work is based at the REC facility, with remote or hybrid opportunities potentially available. The team works a 9x80 schedule with every other Friday off. The position requires working more than eight hours per day, irregular hours, and sometimes working alone. It is a testing-designated position requiring pre-employment and periodic drug testing. The employee must obtain and maintain a DOE Q security clearance and special access as required, and comply with applicable information security and privacy requirements.
Requirements
- Bachelor of Science degree in mechanical engineering, electrical engineering, cybersecurity/computer sciences, and/or business/financial management from an accredited institution.
- Level 2 experience qualification: bachelor's degree plus 2 years of experience; master's degree plus 0 years; or Ph.D. plus 0 years.
- Level 3 experience qualification: bachelor's degree plus 5 years of experience; master's degree plus 2 years; or Ph.D. plus 2 years.
- Relevant experience commensurate with the level, including designing or applying control-systems cybersecurity solutions in critical infrastructure at the system and/or regional level.
- Obtain and maintain a DOE Q security clearance and special access as required; be eligible for a DOE Q clearance and SCI access.
- U.S. citizenship.
- Ability to work under pressure while addressing multiple complex tasks, meeting commitments, maintaining work quality, and maintaining a professional interface.
- Ability, when required, to work in a secure environment handling, storing, and processing classified and CUI information and to adhere to physical and electronic protection standards.
- Ability to meet Testing Designated Position requirements, including pre-employment and periodic drug testing.
- Ability to perform the stated physical duties, including occasionally lifting and/or moving up to 30 pounds, and to meet the visual and hearing requirements of the role.
Nice To Haves
- Professional Engineer certification.
- Certified Information Systems Security Professional (CISSP) certification.
- Relevant program or project management experience at INL, particularly in cybersecurity.
- Familiarity with industrial control systems.
- In-depth knowledge of the U.S. energy sector.
- Experience working with DOE, DOD, DHS, and private industry on grid security-related projects.
Responsibilities
- Provide professional advice, expertise, strategic insight, and cyber-related consulting services to advance ICS cybersecurity for critical infrastructure.
- Advise on cybersecurity designs, implementation, vulnerability identification, and mitigation techniques and procedures to protect critical infrastructure systems from current and emerging threats.
- Monitor critical infrastructure sector networks and actively remediate unauthorized activities.
- Respond to crises or urgent situations in critical infrastructure sectors to mitigate immediate and potential threats.
- Develop, research, and apply mitigation, preparedness, response, and recovery approaches to support life safety, property preservation, and information security.
- Lead cybersecurity efforts and deliver capabilities to customers.
- Promote open and informal communication with internal and external stakeholders at all levels to build trust and teamwork.
- Collect and analyze information about U.S. critical infrastructure, particularly control systems and technology-controlled processes.
- Manage teams creating cybersecurity products.
- Create reports and provide briefings on related issues.
- Conduct technical analysis projects.
- Identify gaps in situational awareness across sectors and develop products for diverse customers, including federal, private, and international organizations across multiple classification levels.
- Perform other duties as assigned.
- Complete initial and annual role-specific information security and privacy training, sign required access agreements, and follow applicable policies and procedures.
Benefits
- Medical, dental, and vision coverage.
- Flexible Spending Accounts.
- 401(k) with a 4.2% employer contribution and up to a 4.8% match for regular positions.
- Paid time off (personal leave).
- Employee Education Program, including tuition assistance for eligible positions.
- Comprehensive relocation package.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
