Critical Infrastructure Security Analyst

Idaho National Laboratory•Idaho Falls, ID

3d•Onsite

About The Position

Idaho National Laboratory is hiring a Critical Infrastructure Security Analyst in the Controls department within the Cybercore Integration Center (CIC). The role is based at INL’s Research and Education Campus in Idaho Falls, Idaho, and follows a 9x80 schedule with every other Friday off. The position reports to the Senior Manager of Controls and requires up to 20% domestic travel to deliver off-site training. The analyst develops and delivers cybersecurity training for Industrial Control Systems (ICS) to external audiences, both on-site and off-site, and serves as a technical subject matter expert for ICS cybersecurity at the CIC. The role provides technical direction, supports new concept development, and serves as a technical interface with customers. It recommends and implements instructional methods including instructor-led, virtual, and simulation-based learning, and develops training based on realistic ICS threat scenarios, data analysis, communications, and complex network management systems. This is a multi-level position, with placement at Level 3 or Level 4 based on the depth and breadth of proven experience and skills. It is a testing-designated position requiring a pre-employment drug screen and periodic drug testing. The position requires the ability to obtain and maintain a DOE Q-clearance with appropriate sigmas and an SCI clearance, willingness and ability to complete a polygraph, and U.S. citizenship to become a full-time member of the Field Intelligence Element.

Requirements

Level 3: Bachelor’s degree in Engineering, Information Technology, Computer Science, Control Systems, or a closely related field, and 5 years of relevant work experience; or an advanced degree in the same fields and 2 years of relevant work experience.
Level 4: Bachelor’s degree in Engineering, Information Technology, Computer Science, Control Systems, or a closely related field and 9 years of relevant work experience; a Master’s degree in the same fields and 6 years of relevant work experience; or a PhD in the same fields and 4 years of relevant work experience.
Ability to obtain and maintain a DOE Q-clearance with appropriate sigmas and an SCI clearance.
Ability and willingness to complete a polygraph.
U.S. citizenship, required to become a full-time member of the Field Intelligence Element.

Nice To Haves

Advanced degree in Engineering from an ABET-accredited institution.
Strong public speaking and presentation skills, with experience instructing technical subjects to professional audiences.
Experience developing cybersecurity courses, labs, and curriculum, including hands-on or simulation-based exercises.
Hands-on experience with Industrial Control Systems, SCADA, or Process Control system design and experimentation, including control system protocols, process control software, data communications, network security, wireless instrumentation security, graphical user interfaces, experimental setup and testing, sensors, and modeling and simulation.
Experience in Blue or Purple Team operations in IT or OT environments.
Experience operating or maintaining a control systems laboratory, test bed, or cyber range environment.
Creativity in developing new training approaches, methodologies, and demonstration capabilities.

Responsibilities

Provide technical instruction and expertise in ICS cybersecurity threat detection, prevention, and management.
Gather information and analyze cyber threats to the United States, its critical infrastructure, and technology-controlled processes.
Serve as a cybersecurity and ICS subject matter expert.
Work on complex cybersecurity issues, determine methods and procedures for assignments, and coordinate activities of other personnel.
Interface with the ICS and critical infrastructure protection community to meet program requirements.
Interface with customers to meet project requirements.
Represent the organization as the prime contact on projects and work.
Represent the program as an instructor in on-site and off-site cybersecurity training activities.
Provide leadership and mentoring to assigned members of small agile teams within the department.
Create reports and provide briefings related to cybersecurity and critical infrastructure issues.
Develop and deliver ICS cybersecurity training for external audiences using in-person, virtual, and simulation-based methods.
Propose and develop training based on realistic ICS threat scenarios, data analysis, communications, and complex network management systems.
Maintain knowledge of ICS and critical infrastructure security events, threats, and developments, and apply it to course content and the development of divisional capabilities and products.
Assist management in defining strategic direction in assigned areas.
Create and implement methodologies and architectures that advance the CIC’s cyber and physical security mission.