Cyber Specialist (Multi-level)

Savannah River Mission Completion•Aiken, SC

3d•$56,000 - $188,000•Onsite

About The Position

Savannah River Mission Completion (SRMC) is seeking Cyber Specialists to be based in our Aiken, SC location on the Savannah River Site (SRS). The Cyber Specialist (Associate level to Principal level) conducts network or software vulnerability assessments and penetration testing for the organization, as established by the United States Department of Energy (DOE) orders and policies on Cyber Security. Isolates, blocks or removes threat access. Evaluates system security configurations. Performs data analysis on network and log monitoring information. Supports the design and administers cyber user awareness programs. Supports the performance of risk assessment on new or modified systems and networks. Provides appropriate documentation to adhere to relevant regulations and achieve organization objectives. This is a multilevel posting. Candidate(s) selected to receive an offer will be offered the position level commensurate with their experience and qualifications.

Requirements

Bachelor's degree in computer science, information technology or equivalent field and experience working in an information technology field with an emphasis in security
Individuals not possessing a four-year degree may qualify with related education and/or experience.

Nice To Haves

Computer Science degree with an emphasis on cyber security
Experience as either a system or network administrator
Responsible for maintaining the security profile of systems and/or networks
Experience using the following types of software: security scanning, patch management, and configuration management
Experience working in a regulated environment
Experience in application penetration testing
Experience using Nessus and Shavlik
Contributed to the development and maintenance of an Accreditation Package in a DOE environment
Knowledgeable on FIPS and NIST guidelines.
Experience working in a DOE or federally regulated environment
Knowledgeable on FIPS 199, NIST 800-53, NIST 800-53a, NIST 800-70, NIST 800-37 (and other NIST guidance documentation)
International Information System Security Certification Consortium certification (ISC)2, Certified Information Security System Professional (CISSP)
Knowledgeable on DOE Ord. 205.1a/b

Responsibilities

Performs routine and/or basic assessments of systems and networks within the networking environment or enclave and identifies systems and networks that deviate from acceptable configurations, enclave policy, or local policy.
Supports the evaluation of cyber security incidents, procedures and capabilities.
With guidance from more senior specialists, evaluates and exploits system and network vulnerabilities and misconfigurations for purposes of gathering data from target or adversary automated information systems or networks and to enable operations and intelligence collection capabilities.
Assists with leveraging penetration testing capabilities on computer networks to disrupt, deny, degrade, or destroy information resident in computers and computer networks, or the computers and networks.
Assists with analysis of data obtained through network security monitoring and log monitoring of systems, evaluates against provided data sources and threat intelligence feeds, and identifies potential issues for further investigation.
Provides input to the development and maintenance of the Certification and Accreditation package in a DOE cyber security environment; including development of System Security Plans, Security Controls Deviations, Contingency and Disaster Recovery Plan, Configuration Management Plan, and other necessary documents.
Provides support to the performance and documentation of risk assessments on new equipment, software, applications, and hardware against the current environment.
Will perform as the Information System Security Officer (ISSO)
Utilizing knowledge of a federally regulated environment and support from lead, develops and evaluates procedures necessary to implement cyber requirements.
Participates in Contingency Plan, Recovery Plan and Incident Response training and tests for assigned information technology (IT)/ Operational Technology (OT) systems.
Participates in Incident Response activities for assigned IT/OT systems.
Serves as support on assigned IT system(s) and brief on all matters, technical and otherwise, involving the cybersecurity posture of the system - including notifications to the system owner, the CIO, and DOE
Works with technical teams to mitigate security control deficiencies for assigned IT/OT systems.
Assesses the cybersecurity impact of changes to assigned IT/OT systems.
Updates hardware and software inventories to reflect changes to assigned IT/OT systems as needed.
Provides technical cybersecurity expertise on IT/OT operational projects throughout the Software Development Lifecycle
Other duties as assigned.

Benefits

401k Retirement Savings Plan – 5% immediate company contribution, additional matching for employee contributions
Health Insurance & Prescription Drug Program
Health Savings Account
Telehealth with BlueCare on Demand
Dental Coverage
Vision Coverage
Flexible Spending Accounts
Includes 160 hours annual paid time off (accrued monthly), plus 11 paid holidays
Paid Parental Leave
Life and Accident Coverage
Disability Coverage
Employee Assistance Program
Tuition Reimbursement