SMC Cybersecurity Analyst

Idaho National Laboratory•Idaho Falls, ID

3d•Onsite

About The Position

This position is responsible for identifying cyber capabilities strategies for custom hardware and software development based on mission requirements. The analyst will conduct and/or support authorized penetration testing on enterprise network assets, evaluate network infrastructure vulnerabilities to enhance capabilities being developed, and build, install, configure, and test dedicated cyber defense hardware. They will assist in assessing the impact of implementing and sustaining a dedicated cyber defense infrastructure, conduct technology assessment and integration processes, and provide and support a prototype capability and/or evaluate its utility. The role involves collaborating with others to identify and/or develop appropriate solutions technology, designing and developing new tools/technologies related to cybersecurity, and identifying functional- and security-related features to find opportunities for new capability development to exploit or mitigate vulnerabilities. The analyst will troubleshoot prototype design and process issues throughout the product design, development, and pre-launch phases, and develop data management capabilities (e.g., cloud-based, centralized cryptographic key management) to include support to the mobile workforce. Additionally, they will review and validate data mining and data warehousing programs, processes, and requirements, and research current technology to understand capabilities of required system or network. The position requires implementing Risk Management Framework (RMF)/Security Assessment and Authorization (SA&A) requirements for dedicated cyber defense systems within the enterprise, and documenting and maintaining records for them. This role interacts primarily with the ISSM/ISSOs and local staff, utilizing knowledge and expertise to analyze all security aspects of an IS and assist in the day-to-day security operations of the system. Job tasks include risk assessments for requested hardware, software, and both medical and non-medical Portable Electronic Devices. In coordination with the ISSM/ISSO, the Cyber Technical Analyst may be asked to assist in incident handling and security training and awareness as it relates to the IS. Other duties as assigned.

Requirements

Bachelor’s degree in related field technical degree, computer science, computer engineering
Relevant experience commensurate with level.
Must be a US Citizen
Must have a DOE “L” or “Q” clearance, or have a government equivalent.
Current certification is preferred.
IAT/IAM Level I certified is having one or more of the following certifications: CAP, CND, Cloud+, GSLC, Security+ CE, HCISPP, A+ CE, CCNA-Security, Network+ CE, SSCP
Experience working with ICS/SCADA/PIT Systems.
Direct technical experience working in Enhance Security Environments.
Sufficient visual acuity and hearing capacity to perform the essential functions and interact with people is required.
Bachelor’s and 2 years of experience (for EX2 level)
Bachelor’s and 5 years of experience (for EX3 level)
Master’s and 0 years of experience (for EX2 level)
Master’s and 2 years of experience (for EX3 level)
PhD and 0 years of experience (for EX2 level)
PhD and 2 years of experience (for EX3 level)

Nice To Haves

Preferred CISSP certification.
Security +
Splunk general
Periodic travel required in normal course of job performance.
Periodic safety training is necessary.
Position may occasionally be required to work special shifts or weekends in support of programs, shifts more than 8 hours and work alone.

Responsibilities

Identify cyber capabilities strategies for custom hardware and software development based on mission requirements.
Conduct and/or support authorized penetration testing on enterprise network assets.
Evaluate network infrastructure vulnerabilities to enhance capabilities being developed.
Build, install, configure, and test dedicated cyber defense hardware.
Assist in assessing the impact of implementing and sustaining a dedicated cyber defense infrastructure.
Conduct technology assessment and integration processes.
Provide and support a prototype capability and/or evaluate its utility.
Collaborate with others to identify and/or develop appropriate solutions technology.
Design and develop new tools/technologies related to cybersecurity.
Identify functional- and security-related features to find opportunities for new capability development to exploit or mitigate vulnerabilities.
Troubleshoot prototype design and process issues throughout the product design, development, and pre-launch phases.
Develop data management capabilities (e.g., cloud-based, centralized cryptographic key management) to include support to the mobile workforce.
Review and validate data mining and data warehousing programs, processes, and requirements.
Research current technology to understand capabilities of required system or network.
Identify and/or develop reverse engineering tools to enhance capabilities and detect vulnerabilities.
Research and evaluate available technologies and standards to meet customer requirements.
Maintain knowledge of applicable cyber defense policies, regulations, and compliance documents specifically related to cyber defense auditing.
Implement Risk Management Framework (RMF)/Security Assessment and Authorization (SA&A) requirements for dedicated cyber defense systems within the enterprise, and document and maintain records for them.
Analyze all security aspects of an IS and assist in the day-to-day security operations of the system.
Conduct risk assessments for requested hardware, software, and both medical and non-medical Portable Electronic Devices.
Assist in incident handling and security training and awareness as it relates to the IS.
Complete initial and annual role-specific training as required.
Comply with all applicable information security and privacy policies and procedures by following established protocols.