SMC Cybersecurity Analyst

Idaho National Laboratory • Idaho Falls, ID

3d • $79,344 - $195,288 • Hybrid

About The Position

This position involves identifying cyber capabilities strategies for custom hardware and software development based on mission requirements. The role includes conducting and supporting authorized penetration testing on enterprise network assets, evaluating network infrastructure vulnerabilities, and building, installing, configuring, and testing dedicated cyber defense hardware. The analyst will assist in assessing the impact of implementing and sustaining a dedicated cyber defense infrastructure, conduct technology assessment and integration processes, and provide and support prototype capabilities. Collaboration with others to identify and develop appropriate technology solutions, design and develop new cybersecurity tools, and identify functional- and security-related features to exploit or mitigate vulnerabilities are key aspects. The role also involves troubleshooting prototype design and process issues, developing data management capabilities (e.g., cloud-based, centralized cryptographic key management) to support the mobile workforce, and reviewing/validating data mining and data warehousing programs. Researching current technology to understand system or network capabilities, evaluating available technologies and standards, and maintaining knowledge of applicable cyber defense policies, regulations, and compliance documents are also required. The analyst will implement Risk Management Framework (RMF)/Security Assessment and Authorization (SA&A) requirements for dedicated cyber defense systems, document, and maintain records. This position interacts primarily with the ISSM/ISSOs and local staff, analyzing all security aspects of an IS and assisting in day-to-day security operations. Job tasks include risk assessments for hardware, software, and Portable Electronic Devices. The Cyber Technical Analyst may also assist in incident handling and security training and awareness. Other duties as assigned.

Requirements

• Bachelor’s degree in related field technical degree, computer science, computer engineering
• Relevant experience commensurate with level.
• Must be a US Citizen and have a DOE “L” or “Q” clearance, or have a government equivalent.
• Current certification is preferred. IAT/IAM Level I certified is having one or more of the following certifications: CAP, CND, Cloud+, GSLC, Security+ CE, HCISPP, A+ CE, CCNA-Security, Network+ CE, SSCP

Nice To Haves

• CISSP certification.
• Security +, Splunk general
• Experience working with ICS/SCADA/PIT Systems.
• Direct technical experience working in Enhance Security Environments.

Responsibilities

• Identify cyber capabilities strategies for custom hardware and software development based on mission requirements.
• Conduct and/or support authorized penetration testing on enterprise network assets.
• Evaluate network infrastructure vulnerabilities to enhance capabilities being developed.
• Build, install, configure, and test dedicated cyber defense hardware.
• Assist in assessing the impact of implementing and sustaining a dedicated cyber defense infrastructure.
• Conduct technology assessment and integration processes.
• Provide and support a prototype capability and/or evaluate its utility.
• Collaborate with others to identify and/or develop appropriate solutions technology.
• Design and develop new tools/technologies related to cybersecurity.
• Identify functional- and security-related features to find opportunities for new capability development to exploit or mitigate vulnerabilities.
• Troubleshoot prototype design and process issues throughout the product design, development, and pre-launch phases.
• Develop data management capabilities (e.g., cloud-based, centralized cryptographic key management) to include support to the mobile workforce.
• Review and validate data mining and data warehousing programs, processes, and requirements.
• Research current technology to understand capabilities of required system or network.
• Research and evaluate available technologies and standards to meet customer requirements.
• Maintain knowledge of applicable cyber defense policies, regulations, and compliance documents specifically related to cyber defense auditing.
• Implement Risk Management Framework (RMF)/Security Assessment and Authorization (SA&A) requirements for dedicated cyber defense systems within the enterprise, and document and maintain records for them.
• Analyze all security aspects of an IS and assist in the day-to-day security operations of the system.
• Perform risk assessments for requested hardware, software, and both medical and non-medical Portable Electronic Devices.
• Assist in incident handling and security training and awareness as it relates to the IS.
• Other duties as assigned.

Benefits

• Medical, Dental, Vision, and Flexible Spending Accounts
• 401(k) with a 4.2% employer contribution and up to 4.8% match (regular positions) or self-contribute access (postdoctoral positions)
• Paid time off (personal leave)
• Employee Education Program (tuition assistance for eligible positions)
• Comprehensive Relocation Package

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level