Cyber Security Security Control Assessor

LLNL•Livermore, CA

3d•$121,830 - $185,544•Hybrid

About The Position

Lawrence Livermore National Laboratory (LLNL) is seeking a Cyber Security Security Control Assessor to join the Information Technology Solutions Division (ITSD) within the Computing Directorate, matrixed to the Cyber Security Program (CSP) in support of the LivIT Program. This is a hybrid position, requiring a combination of remote and in-office work, typically with several days per week on-site. The role involves identifying security concerns by analyzing computer system security control requirements and implementations to determine unmitigated risks to operating systems, networks, and cloud services. The assessor will analyze information system security plans and testing documents, assist in developing testing procedures and security plan documentation, and perform comprehensive assessments for ongoing authorization of information systems and cloud services. Additionally, the role includes conducting Cyber Security Program self-assessments, contributing to corrective action plans, participating in external cyber security audits, and evaluating technical security controls, processes, procedures, and policies. For the higher SES.2 level, responsibilities include managing multiple customer and stakeholder tasks, ensuring deadlines are met, leveraging team member skills, performing technical assessments, documenting actions and findings, and making remediation recommendations.

Requirements

Ability to secure and maintain a U.S. DOE Q-level security clearance which requires U.S. citizenship.
Bachelor’s degree in Computer Science, Computer Engineering, Computer Information Systems, or the equivalent combination of education and related experience.
Knowledge of computer, network technologies and cyber security frameworks.
Experience performing cyber security risk analysis or demonstrated research skills (the ability to search for, locate, extract, organize, evaluate, and use or present information that is relevant to a particular topic).
Ability to tackle challenging problems with creativity and adaptability, while remaining flexible to shifting priorities.
Effective verbal, written, and interpersonal communication skills necessary to collaborate in a multi-disciplinary team environment and communicate technical information, document work, and prepare and present technical information.
Ability to effectively manage concurrent technical tasks with conflicting priorities and demonstrated advanced organizational skills, attention to detail, accuracy and follow through.
Experience providing innovative approaches and applying new technologies to broadly defined tasks and projects.
Broad experience applying effective analytical and problem-solving skills to moderately complex problems.
Experience in either hands-on information technology, cybersecurity engineering, or cybersecurity auditing and assessment.

Nice To Haves

Knowledge of risk mitigation requirements for computer operating systems, network, or cloud services.
Knowledge of the National Institute of Standards and Technology (NIST) Special Publication 800-53 (Security and Privacy Controls for Information Systems and Organizations).
Applicable Cyber Security certifications (CISSP, CompTIA Network+, CompTIA Security+, CompTIA Cloud+, Certified Cloud Security Professional, or similar), participating in Capture The Flag (CTF) events, or attendance of cyber security conferences/lectures.

Responsibilities

Identify security concerns by analyzing computer system security control requirements and implementations to determine unmitigated risks to computer operating systems, networks, and cloud services.
Analyze moderately complex information system security plans and testing documents and assist programs in the development of testing procedures and security plan documentation.
Perform comprehensive assessments in information systems and cloud services in support of ongoing authorization of information systems and cloud services.
Conduct Cyber Security Program self-assessments and contribute to the development and completion of corrective action plans when needed for programs and CSP.
Participate in external cyber security auditing functions in the response, collection of data, preparation of reports to outside agencies, and organizations internal/external to the Laboratory.
Evaluate technical security controls, cyber security processes, procedures and policies for efficiency and accuracy.
Perform other duties as assigned.
Manage multiple tasks and priorities of customers and stakeholders, ensuring deadlines are met, while leveraging team member skills.
Perform technical assessments, document actions, findings, and make remediation recommendations.