Critical Infrastructure Security Analyst

Idaho National Laboratory • Idaho Falls, ID

4d • $95,256 - $234,336 • Onsite

About The Position

Idaho National Laboratory is hiring a Critical Infrastructure Security Analyst in the Controls department within the Cybercore Integration Center (CIC). The team works a 9x80 schedule at INL’s Research and Education Campus in Idaho Falls, Idaho, with every other Friday off. The role reports to the Senior Manager of Controls and requires up to 20% domestic travel to deliver off-site training.

The analyst develops and delivers Industrial Control Systems (ICS) cybersecurity training to external audiences, on-site and off-site, and serves as the CIC’s ICS cybersecurity subject matter expert. The role provides technical direction, supports new concept development, and interfaces technically with customers. It recommends and implements instructional methods including instructor-led, virtual, and simulation-based learning, and develops training based on realistic ICS threat scenarios, data analysis, communications, and complex network management systems.

This is a multi-level position at Level 3 or Level 4, with placement based on the depth and breadth of demonstrated experience and skills. It is a testing-designated position requiring pre-employment and periodic drug testing. The position requires the ability to obtain and maintain DOE Q clearance with appropriate sigmas and SCI clearance, willingness and ability to complete a polygraph, and full-time membership in the Field Intelligence Element; U.S. citizenship is required.

Requirements

• Level 3: Bachelor’s degree in Engineering, Information Technology, Computer Science, Control Systems, or a closely related field and 5 years of relevant work experience; alternatively, an advanced degree in the same fields and 2 years of relevant work experience.
• Level 4: Bachelor’s degree in Engineering, Information Technology, Computer Science, Control Systems, or a closely related field and 9 years of relevant work experience; alternatively, a Master’s degree in the same fields and 6 years of relevant work experience, or a PhD in the same fields and 4 years of relevant work experience.
• Ability to obtain and maintain a DOE Q clearance with appropriate sigmas and SCI clearance, complete a polygraph, and become a full-time member of the Field Intelligence Element.
• U.S. citizenship.
• Ability to travel domestically up to 20% to deliver off-site training.
• Ability to perform the stated physical functions, including standing, walking, sitting, stooping, kneeling, bending, keyboarding, handling materials and tools, reaching, and occasionally lifting or moving up to 35 pounds.
• Sufficient visual acuity and hearing capacity to perform essential functions and interact with people.

Nice To Haves

• Advanced degree in Engineering from an ABET-accredited institution.
• Strong public speaking and presentation skills, including experience instructing technical subjects to professional audiences.
• Experience developing cybersecurity courses, labs, and curriculum, including hands-on or simulation-based exercises.
• Experience teaching ICS cybersecurity topics including asset and threat identification, protection, attack detection, and response management.
• Knowledge of ICS and critical infrastructure security events, threats, and developments, and ability to apply that knowledge to course content and develop new divisional capabilities and products.
• Hands-on experience with Industrial Control Systems, SCADA, or process control system design and experimentation, including control system protocols, process control software, data communications, network security, wireless instrumentation security, graphical user interfaces, experimental setup and testing, sensors, and modeling and simulation.
• Experience in Blue or Purple Team operations in IT or OT environments.
• Experience operating or maintaining a control systems laboratory, test bed, or cyber range environment.
• Creativity in developing new training approaches, methodologies, and demonstration capabilities.
• Ability to assist management in defining strategic direction and to create and implement methodologies and architectures advancing the CIC’s cyber and physical security mission.

Responsibilities

• Provide technical instruction and expertise in ICS cybersecurity threat detection, prevention, and management.
• Gather information and analyze cyber threats to the United States, its critical infrastructure, and technology-controlled processes.
• Serve as a cybersecurity and ICS subject matter expert.
• Address complex cybersecurity issues, determine methods and procedures for assignments, and coordinate the activities of other personnel.
• Interface with the ICS and critical infrastructure protection community to meet program requirements and with customers to meet project requirements.
• Represent the organization as the prime contact on projects and work.
• Represent the program as an instructor in on-site and off-site cybersecurity training activities.
• Provide leadership and mentoring to assigned members of small agile teams within the department.
• Create reports and provide briefings related to cybersecurity and critical infrastructure issues.
• Develop and deliver ICS cybersecurity training using in-person, virtual, and simulation-based methods, including training based on realistic threat scenarios.
• Recommend and implement advanced instructional methods and propose training based on data analysis, communications, and complex network management systems.

Benefits

• Medical, dental, and vision coverage
• Flexible Spending Accounts
• 401(k) with a 4.2% employer contribution and up to 4.8% match for regular positions
• Paid time off (personal leave)
• Employee Education Program with tuition assistance for eligible positions
• Comprehensive relocation package

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level