Cyber Security Specialist

Koniag Government Services, LLC•Oak Ridge, TN

3d•$113,000 - $116,000•Hybrid

About The Position

Tuknik Government Services, LLC, a Koniag Government Services company, is seeking an experienced Cybersecurity Specialist to support the company and its government customer in Oak Ridge, Tennessee. The role provides independent technical, analytical, assessment, coordination, and documentation support to the Department of Energy’s Oak Ridge Office of Environmental Management (OREM) Cybersecurity Program. The specialist serves as a subject matter expert supporting the Authorizing Official Designated Representative (AODR), the Safety, Security, & Waste Management Branch Chief, the Risk Executive, and other Government officials. The position reports to the Program Manager, with daily task direction and work assignments provided by the COR (HQ). The contractor provides support and recommendations but does not make inherently governmental decisions or exercise authority reserved to Federal officials. The role supports system authorization and continuous monitoring, including independent review of authorization packages and evidence; analysis of security plans, assessments, risks, findings, and POA&Ms; and documented recommendations on gaps, risks, remediation, and authorization conditions. It also plans and conducts Government-authorized continuous monitoring and security control assessments, including in applicable ICS/OT, NSS, GSS, and UCNI environments; documents results; and validates remediation evidence. Additional duties include vulnerability and patch-management analysis, contractor cybersecurity oversight, audit and inspection support, review of new projects and significant system changes, HQ data-call coordination, and preparation of technical and administrative deliverables. The position is hybrid and requires onsite work in Oak Ridge approximately two days every two weeks on average. The specialist must be able to report to the site within two hours of request during business hours, as needed. An active DOE Q or DoD Top Secret clearance, or the ability to obtain one, is required for assigned duties.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field from an accredited college or university, or equivalent experience in lieu of a degree.
Significant experience in IT and cybersecurity, including implementing or assessing cybersecurity solutions in diverse operating environments.
Certified Information Systems Security Professional (CISSP) certification.
Thorough familiarity with DOE O 205.1, EM Cybersecurity Program Plan (CSPP), NIST SP 800-53 Rev. 5, NIST SP 800-171, DOE/EM POA&M guidance, DOE O 206.1A, NIST SP 800-82 Rev. 3, NIST SP 800-137/137A, NIST SP 800-37 Rev. 2, and applicable Executive Orders, BODs, and DOE directives.
Functional understanding of IT and OT system components, including TCP/IP, network and host-based intrusion detection/prevention, vulnerability scanning, Windows and Unix/Linux operating systems, routers, switches, database management systems, and security tooling.
Ability to independently analyze complex technical evidence and communicate risks and recommendations to technical and executive stakeholders.
Demonstrated technical writing and report-development skills.
Excellent verbal communication, analytical, and problem-resolution skills.
Ability to manage multiple concurrent tasks and meet Government-established deadlines.
Ability to work effectively as a team member while maintaining independent professional judgment, including under daily task direction from a COR.
Ability to distinguish advisory recommendations from Government decision-making authority and appropriately elevate matters requiring Government judgment.
Active DOE Q clearance or DoD Top Secret clearance, or the ability to obtain one, as required for assigned duties.
Ability to report to the Oak Ridge, Tennessee site within two hours of request during business hours, as needed.

Nice To Haves

Experience supporting Federal RMF, system authorization, security control assessment, continuous monitoring, POA&M management, and cybersecurity risk analysis.
Experience supporting DOE or other Federal agency cybersecurity programs in an EM or similarly complex mission environment.
Experience with ICS/OT security assessments and application of NIST SP 800-82.
Experience supporting NSS, GSS, or UCNI environments.
Familiarity with the CISA KEV catalog and BOD 22-01 compliance processes.
Experience coordinating HQ data calls and consolidating responses from multiple contractors.
Experience developing Program Management Plans (PMPs) or Quality Assurance Plans (QAPs) in a Federal contracting environment.
Additional certifications such as CISM, CAP, or Security+.

Responsibilities

Attend cybersecurity, authorization, risk, assessment, and contractor oversight meetings with the AODR and stakeholders as requested.
Support the AODR through system authorization and continuous monitoring, including independent technical review of authorization packages and supporting evidence.
Review SSPs, security control descriptions, assessment results, POA&Ms, implementation plans, impact assessments, risk categorizations and assessments, technical justifications, and other authorization artifacts for completeness, consistency, and technical sufficiency.
Identify cybersecurity risks, control deficiencies, evidence gaps, authorization conditions, and residual-risk considerations; provide documented analysis and recommendations.
Review proposed risk responses and POA&M content and recommend technical improvements, milestones, remediation priorities, and closure evidence.
Track authorization conditions, findings, corrective actions, POA&Ms, and other risk-treatment activities through closure or Government disposition.
Review HQ initiatives, Executive Orders, BODs, data calls, and other requirements; provide impact analyses and recommendations.
Assess applicable cybersecurity requirements across OREM information systems and document recommendations for resolving gaps and risks.
Plan and perform Government-authorized continuous monitoring and security control assessments for OREM system boundaries, including applicable ICS/OT, NSS, GSS, UCNI, and other designated environments.
Develop or support assessment plans that define scope, systems, controls, evidence, assessment methods, schedules, personnel, technical testing, and Rules of Engagement.
Use approved examination, interview, testing, technical validation, vulnerability analysis, and other assessment methods; perform full ST&E activities when directed by the Government.
Document assessment results in ISCM reports, SARs, ST&E reports, or other Government-approved formats.
Support follow-up validation of remediation and closure evidence for assessment findings and POA&M items.
Assess vulnerability and patch-management compliance, including CISA KEV and BOD 22-01 requirements; analyze scan results, missing patches or updates, configuration weaknesses, false positives, compensating controls, and remediation evidence.
Support DOE oversight of contractor cybersecurity programs by reviewing evidence, assessing requirements implementation, identifying gaps and risks, and documenting recommendations.
Coordinate cybersecurity activities associated with internal and external audits, inspections, reviews, and assessments.
Review new cybersecurity projects and significant system changes for integration of applicable requirements.
Recommend improvements to cybersecurity processes, metrics, governance, and risk-management practices.
Attend HQ data-call meetings; coordinate collection, consolidation, quality review, and status tracking of OREM contractor responses.
Track data-call due dates and identify late, incomplete, inconsistent, or unsupported responses; communicate authorized questions and clarification requests to HQ and document responses.
Prepare response packages, status reports, action trackers, supporting documentation, and other administrative assistance related to AODR cybersecurity duties.
Prepare authorization-package technical review memoranda, assessment plans, ISCM reports, SARs, POA&M review comments, vulnerability/KEV/patch analyses, risk summaries, trackers, audit-support results, HQ data-call packages, and monthly cybersecurity program status summaries in Government-approved formats.
Ensure technical deliverables are accurate, traceable, and technically defensible.
Report to the Oak Ridge site within two hours of request during business hours, as needed.