Cyber Security Engineer

LLNL•Livermore, CA

1d•$121,830 - $185,544•Hybrid

About The Position

We have an opening for a hands-on Cyber Security Engineer to provide support for GRC (Governance Risk and Compliance) efforts and implementation of security measures aimed at safeguarding our organization's digital assets. You will build and maintain complex technical projects of various GRC software solutions to ensure cyber security risks are identified and monitored. Collaborate with stakeholders, business analysts, process leaders, and architects in interpreting requirements and configuring risk remediation measures. This position is in the Information Technology Solutions Division (ITSD) within the LivIT Program in the Computing Directorate. This position offers a hybrid schedule, blending in-person and virtual presence. You will have the flexibility to work from home one or more days per week. This position will be filled at either level based on knowledge and related experience as assessed by the hiring team. Additional job responsibilities (outlined below) will be assigned if hired at the higher level.

Requirements

Ability to secure and maintain a U.S. DOE Q-level security clearance which requires U.S. citizenship.
Bachelor’s degree in computer science, Engineering, Business, Information Systems, or related field, or the equivalent combination of technical training and experience
Sufficient experience in Information Security with sufficient working knowledge of information systems and latest technologies is required.
Experience with data platforms to analyze machine-generated big data, including log data, event data, and other types of structured and unstructured data.
Sufficient experience working with hybrid cloud infrastructures.
Sufficient knowledge of and technical expertise with cyber-related tools for auditing, compliance verification, vulnerability testing, and continuous system monitoring.
Experience setting priorities and solving complex problems in a fast-paced, engineering team environment.
Effective verbal and written communication skills necessary to collaborate in a team environment and document, present and explain technical information.
Broad experience developing technical cyber security solutions.
Proficient experience in IT infrastructure, possessing a strong understanding of network architecture, system administration, and cloud computing platforms.
Comprehensive experience with data platforms to analyze machine-generated big data, including log data, event data, and other types of structured and unstructured data.

Nice To Haves

Professional computer certification (e.g., CISSP, SANS Certification, Security+)
Splunk certifications (Power or Adv. Power User)

Responsibilities

Participate in the information assurance security program, ensuring cyber activities, processes, and procedures meet defined requirements, policies, and regulations.
Plan, design, evaluate complex and implement effective controls with various software tools to secure protected data and ensure cyber security compliance with relevant security frameworks and regulations. support the security governance technology deployments and configurations.
Provide GRC guidance and interpretation of rules, regulations, risks, and best practices.
Connect business requirements with the functional capabilities of a GRC platform.
Inspect information system configurations to verify compliance and work closely with system administrators and other security professionals to maintain accreditation status.
Adaptability and the capability to stay current with evolving regulations and industry trends.
Perform other duties as assigned.
Manage multiple parallel tasks and priorities of customers and stakeholders, ensuring deadlines are met, while leveraging team member’s skills.
Provide solutions to moderately complex problems that require analysis of largely identifiable factors.