Cybersecurity Analyst, Advanced

Naval Nuclear Laboratory•Schenectady, PA

5d•Onsite

About The Position

Working at the Naval Nuclear Laboratory we foster pride in belonging to an organization whose culture is made up of these core values: Trust, Empowerment, and Collaboration. Our company promotes a positive culture while ensuring the safety and reliability of our nation's naval nuclear reactors, and training the Sailors who operate those reactors in the U.S. Navy's submarines and aircraft carrier Fleets. Looking for a lifetime career? Apply today! Job Description Naval Nuclear Laboratory (NNL) is seeking a highly motivated Cybersecurity Analyst to join the Information Technology (IT) team and support the mission of delivering exceptional cybersecurity services. This position places a strong focus on advanced red team operations and adversary based security testing. The Cybersecurity Analyst will operate in a technically diverse environment conducting advanced red team engagements across enterprise systems, networks, applications, and supporting infrastructure. This role requires technical knowledge in operating systems, networking, Active Directory, application security, and scripting to simulate real-world adversaries and identify opportunities for improving organizational defenses. The successful candidate will help strengthen the organization's security posture through penetration testing, adversary emulation, threat-led red team operations, and coordinated purple team exercises that validate and improve defensive capabilities. The analyst will partner with the Security Operations Center (SOC), incident response, and engineering teams to pinpoint detection gaps, refine security monitoring, and assist with vulnerability and zero-day response. This individual will collaborate with internal customers, IT teams, defensive security teams, and government stakeholders to ensure successful execution of security assessments, adversary emulation activities, and realistic attack simulations across the Program.

Requirements

Bachelor's degree from an accredited college or university and a minimum of 4 years of relevant experience; or Master's degree from an accredited college or university in a related field and a minimum of 2 years of relevant experience.
Strong understanding of cybersecurity principles and offensive security methodologies.
Excellent teamwork, communication, and organizational capabilities.
Robust troubleshooting and problem solving skills.
Ability to collaborate across multiple locations.
Penetration testing or red team experience.
Knowledge of networking protocols.
Experience with Active Directory.
Proficiency in Linux and Windows environments.
Scripting experience.
Familiarity with red team tools and frameworks.
Ability to deliver clear presentations and produce well-structured technical documentation.
All candidates must be U.S. citizens.
Applicants selected will be subject to a Federal background investigation and must meet eligibility requirements for access to classified matter.
All candidates must be able to pass a drug test in compliance with FMP company policy and 10 CFR 707.

Responsibilities

Lead and participate in red team assessments and penetration tests
Conduct internal and external penetration testing across networks, systems, applications, cloud environments, APIs, and wireless infrastructure
Execute advanced red team operations, including adversary emulation aligned with MITRE ATT&CK techniques
Simulate real world threats, including nation state actors and advanced persistent threat (APT) tradecraft
Identify gaps in detection, response, and defensive posture through realistic attack chains and multistage operations
Collaborate with blue teams during purple team exercises to enhance detection logic, response capabilities, and SOC effectiveness
Support cybersecurity system maintenance, upgrades, incident response activities, and threat hunting
Coordinate stakeholders during tabletop incident response exercises and cybersecurity decision making scenarios
Produce detailed technical reports and executive level summaries with clear remediation guidance
Present results to internal stakeholders and customers in a clear, actionable format
Serve as a technical lead for zero day vulnerability response efforts, including rapid analysis and mitigation strategy development
Assist in developing and refining cybersecurity policies, standards, procedures, and playbooks based on offensive testing outcomes
Support government directed cybersecurity data calls, ensuring timely and accurate reporting