Cyber Security Security Control Assessor

LLNL•Livermore, CA

2d•Hybrid

About The Position

We have an opening for a Cyber Security Security Control Assessor. You will perform a wide range of activities associated with cyber security. The position is within the Information Technology Solutions Division (ITSD) of the Computing Directorate matrixed to the Cyber Security Program (CSP) in support of the LivIT Program. This position is a hybrid work schedule combination of remote and in-office, typically requiring on-site presence several days per week. This position offers a hybrid schedule, blending in-person and virtual presence. You will have the flexibility to work from home one or more days per week. This position will be filled at either level based on knowledge and related experience as assessed by the hiring team. Additional job responsibilities (outlined below) will be assigned if hired at the higher level.

Requirements

Ability to secure and maintain a U.S. DOE Q-level security clearance which requires U.S. citizenship.
Bachelor’s degree in Computer Science, Computer Engineering, Computer Information Systems, or the equivalent combination of education and related experience.
Knowledge of computer, network technologies and cyber security frameworks.
Experience performing cyber security risk analysis or demonstrated research skills (the ability to search for, locate, extract, organize, evaluate, and use or present information that is relevant to a particular topic).
Ability to tackle challenging problems with creativity and adaptability, while remaining flexible to shifting priorities.
Effective verbal, written, and interpersonal communication skills necessary to collaborate in a multi-disciplinary team environment and communicate technical information, document work, and prepare and present technical information.
Ability to effectively manage concurrent technical tasks with conflicting priorities and demonstrated advanced organizational skills, attention to detail, accuracy and follow through.
Experience providing innovative approaches and applying new technologies to broadly defined tasks and projects.
Broad experience applying effective analytical and problem-solving skills to moderately complex problems.
Experience in either hands-on information technology, cybersecurity engineering, or cybersecurity auditing and assessment.

Nice To Haves

Knowledge of risk mitigation requirements for computer operating systems, network, or cloud services.
Knowledge of the National Institute of Standards and Technology (NIST) Special Publication 800-53 (Security and Privacy Controls for Information Systems and Organizations).
Applicable Cyber Security certifications (CISSP, CompTIA Network+, CompTIA Security+, CompTIA Cloud+, Certified Cloud Security Professional, or similar), participating in Capture The Flag (CTF) events, or attendance of cyber security conferences/lectures.

Responsibilities

Identify security concerns by analyzing computer system security control requirements and implementations to determine unmitigated risks to computer operating systems, networks, and cloud services.
Analyze moderately complex information system security plans and testing documents and assist programs in the development of testing procedures and security plan documentation.
Perform comprehensive assessments in information systems and cloud services in support of ongoing authorization of information systems and cloud services.
Conduct Cyber Security Program self-assessments and contribute to the development and completion of corrective action plans when needed for programs and CSP.
Participate in external cyber security auditing functions in the response, collection of data, preparation of reports to outside agencies, and organizations internal/external to the Laboratory.
Evaluate technical security controls, cyber security processes, procedures and policies for efficiency and accuracy.
Perform other duties as assigned.
Manage multiple tasks and priorities of customers and stakeholders, ensuring deadlines are met, while leveraging team member skills.
Perform technical assessments, document actions, findings, and make remediation recommendations.