Cyber Security Analyst 3

Pacific Northwest National Laboratory•Richland, WA

6d•Hybrid

About The Position

At PNNL, our core capabilities are divided among major departments that we refer to as Directorates within the Lab, focused on a specific area of scientific research or other function, with its own leadership team and dedicated budget. Our Science & Technology directorates include National Security, Earth and Biological Sciences, Physical and Computational Sciences, and Energy and Environment. In addition, we have an Environmental Molecular Sciences Laboratory, a Department of Energy, Office of Science user facility housed on the PNNL campus. The Energy and Environment Directorate delivers science and technology solutions for the nation’s biggest energy and environmental challenges. Our more than 1,700 staff support the Department of Energy (DOE), delivering on key DOE mission areas including: modernizing our nation’s power grid to maintain a reliable, affordable, secure, and resilient electricity delivery infrastructure; research, development, validation, and effective utilization of renewable energy and efficiency technologies that improve the affordability, reliability, resiliency, and security of the American energy system; and resolving complex issues in nuclear science, energy, and environmental management. The Energy and Environment Directorate delivers science and technology solutions for the nation’s biggest energy and environmental challenges. Our more than 1,700 staff support the Department of Energy (DOE), delivering on key DOE mission areas including: modernizing our nation’s power grid to maintain a reliable, affordable, secure, and resilient electricity delivery infrastructure; research, development, validation, and effective utilization of renewable energy and efficiency technologies that improve the affordability, reliability, resiliency, and security of the American energy system; and resolving complex issues in nuclear science, energy, and environmental management.

Requirements

BS/BA and 5+ years of relevant cybersecurity policy experience -OR- MS/MA and 3+ years of relevant cybersecurity policy experience -OR- PhD with 1+ year of relevant cybersecurity policy experience
U.S. Citizenship
Ability to obtain and maintain a federal security clearance.
Background Investigation: Applicants selected will be subject to a Federal background investigation and must meet eligibility requirements for access to classified matter in accordance with 10 CFR 710, Appendix B.
Drug Testing: All Security Clearance positions are Testing Designated Positions, which means that the applicant selected for hire is subject to pre-employment drug testing, and post-employment random drug testing. In addition, applicants must be able to demonstrate non-use of illegal drugs, including marijuana, for the 12 consecutive months preceding completion of the requisite Questionnaire for National Security Positions (QNSP).
Note: Applicants will be considered ineligible for security clearance processing by the U.S. Department of Energy if non-use of illegal drugs, including marijuana, for 12 months cannot be demonstrated.
This position is a Testing Designated Position (TDP). The candidate selected for this position will be subject to pre-employment and random drug testing for illegal drugs, including marijuana, consistent with the Controlled Substances Act and the PNNL Workplace Substance Abuse Program.
As a national laboratory, PNNL is responsible for adhering to the Homeland Security Presidential Directive 12 (HSPD-12) and Department of Energy (DOE) Order 473.1A, which require new employees to obtain and maintain a HSPD-12 Personal Identify Verification (PIV) Credential. To obtain this credential, new employees must successfully complete the applicable tier of federal background investigation post hire and receive a favorable federal adjudication. The tier of federal background investigation will be determined by job duties and national security or public trust responsibilities associated with the job. All tiers of investigation include a declaration of illegal drug activities, including use, supply, possession, or manufacture within the last 1 to 7 years (depending on the applicable tier of investigation). Illegal drug activities include marijuana and cannabis derivatives, which are still considered illegal under federal law, regardless of state laws.
For foreign national candidates: If you have not resided in the U.S. for three consecutive years, you are not eligible for the PIV credential and instead will need to obtain a favorable Local Site Specific Only (LSSO) Federal risk determination to maintain employment. Once you meet the three-year residency requirement thereafter, you will be required to obtain a PIV credential to maintain employment. The tier of federal background investigation required to obtain the PIV credential will be determined by job duties at the time you become eligible for the PIV credential.
The Department of Energy (DOE) prohibits DOE employees and contractors from having any affiliation with the foreign government of a country DOE has identified as a “country of risk” without explicit approval by DOE and Battelle. If you are offered a position at PNNL and currently have any affiliation with the government of one of these countries, you will be required to disclose this information and recuse yourself of that affiliation or receive approval from DOE and Battelle prior to your first day of employment.

Nice To Haves

Experience in planning assessments and being a senior member in a team of security control assessors.
Experience in presenting control requirements and deficiencies to both technical and non-technical audiences.
Experience performing detailed, full-scope technical security control testing in complex environments.
Ability to analyze information system configurations and technical specifications against NIST SP 800-53 and other frameworks.
Experience with development and writing of risk-based documentation.
Experience performing Security Authorization activities, including risk assessments, Security Plans, Security Controls Assessments (SCA), Authorization document development and/or review.
Knowledge of current industry methods for evaluating, implementing, and disseminating information technology (IT) security assessment, monitoring, detection, and remediation tools and procedures.
Ability to obtain and maintain a Top Secret clearance (TS or Q) and access to SCI.

Responsibilities

Perform independent security and privacy control assessments in support of Security Authorization (SA).
Conduct assessments of existing and new FISMA systems, including subsystems in the respective system boundary, and communicate the results and potential implications of identified control weaknesses.
Develop and execute on detailed Security Assessment Plans including the development of assessment methods appropriate to the desired level of assurance.
Collect assessment evidence, working with various stakeholders as necessary and performing interviews of information system staff and users.
Draft comprehensive Security Assessment Reports detailing assessment findings, providing an accurate technical evaluation of the system's security posture, clearly describing any identified deviations and/or weaknesses and potential impacts and/or risks, and recommending corrective actions as appropriate.
Document and provide findings and recommendations that are concise, system-specific, and actionable.
This is an onsite position in Richland, Washington with an expectation of 3-4 days onsite a week.