OverviewThe Energy and Environment Directorate delivers science and technology solutions for the nation's biggest energy and environmental challenges. Our more than 1,700 staff support the Department of Energy (DOE), delivering on key DOE mission areas including: modernizing our nation's power grid to maintain a reliable, affordable, secure, and resilient electricity delivery infrastructure; research, development, validation, and effective utilization of renewable energy and efficiency technologies that improve the affordability, reliability, resiliency, and security of the American energy system; and resolving complex issues in nuclear science, energy, and environmental management.
Responsibilities- Perform independent security and privacy control assessments in support of Security Authorization (SA).
- Conduct assessments of existing and new FISMA systems, including subsystems in the respective system boundary, and communicate the results and potential implications of identified control weaknesses.
- Develop and execute on detailed Security Assessment Plans including the development of assessment methods appropriate to the desired level of assurance.
- Collect assessment evidence, working with various stakeholders as necessary and performing interviews of information system staff and users.
- Draft comprehensive Security Assessment Reports detailing assessment findings, providing an accurate technical evaluation of the system's security posture, clearly describing any identified deviations and/or weaknesses and potential impacts and/or risks, and recommending corrective actions as appropriate.
- Document and provide findings and recommendations that are concise, system-specific, and actionable.
This is an onsite position in Richland, Washington with an expectation of 3-4 days onsite a week.QualificationsMinimum Qualifications:
- BS/BA and 5+ years of relevant cybersecurity policy experience -OR-
- MS/MA and 3+ years of relevant cybersecurity policy experience -OR-
- PhD with 1+ year of relevant cybersecurity policy experience
Preferred Qualifications:
- Experience in planning assessments and being a senior member in a team of security control assessors.
- Experience in presenting control requirements and deficiencies to both technical and non-technical audiences.
- Experience performing detailed, full-scope technical security control testing in complex environments.
- Ability to analyze information system configurations and technical specifications against NIST SP 800-53 and other frameworks.
- Experience with development and writing of risk-based documentation.
- Experience performing Security Authorization activities, including risk assessments, Security Plans, Security Controls Assessments (SCA), Authorization document development and/or review.
- Knowledge of current industry methods for evaluating, implementing, and disseminating information technology (IT) security assessment, monitoring, detection, and remediation tools and procedures.
- Ability to obtain and maintain a Top Secret clearance (TS or Q) and access to SCI.
Hazardous Working Conditions/EnvironmentNot Applicable
Additional InformationThis position requires the ability to obtain and maintain a federal security clearance.
A security clearance background investigation includes review of your employment, education, financial, and criminal history, as well as interviews with you and your personal references, neighbors, and co-workers to determine trustworthiness, reliability, and loyalty to the United States. The investigation also examines your foreign connections, drug and alcohol use, foreign influence, and overall conduct.
Requirements:
- U.S. Citizenship
- Background Investigation: Applicants selected will be subject to a Federal background investigation and must meet eligibility requirements for access to classified matter in accordance with 10 CFR 710, Appendix B.
- Drug Testing: All Security Clearance positions are Testing Designated Positions, which means that the applicant selected for hire is subject to pre-employment drug testing, and post-employment random drug testing. In addition, applicants must be able to demonstrate non-use of illegal drugs, including marijuana, for the 12 consecutive months preceding completion of the requisite Questionnaire for National Security Positions (QNSP).
Note: Applicants will be considered ineligible for security clearance processing by the U.S. Department of Energy if non-use of illegal drugs, including marijuana, for 12 months cannot be demonstrated.
Testing Designated PositionThis position is a Testing Designated Position (TDP). The candidate selected for this position will be subject to pre-employment and random drug testing for illegal drugs, including marijuana, consistent with the Controlled Substances Act and the PNNL Workplace Substance Abuse Program.
Rockstar RewardsEmployees and their families are offered medical insurance, dental insurance, vision insurance, robust telehealth care options, several mental health benefits, free wellness coaching, health savings account, flexible spending accounts, basic life insurance, disability insurance*, employee assistance program, business travel insurance, tuition assistance, relocation, backup childcare, legal benefits, supplemental parental bonding leave, surrogacy and adoption assistance, and fertility support. Employees are automatically enrolled in our company-funded pension plan* and may enroll in our 401 (k) savings plan with company match*. Employees may accrue up to 120 vacation hours per year and may receive ten paid holidays per year.
* Research Associates excluded.
**All benefits are dependent upon eligibility.
Click Here For Rockstar Rewards
Notice to ApplicantsPNNL lists the full pay range for the position in the job posting. Starting pay is calculated from the minimum of the pay range and actual placement in the range is determined based on an individual's relevant job-related skills, qualifications, and experience. This approach is applicable to all positions, with the exception of positions governed by collective bargaining agreements and certain limited-term positions which have specific pay rules.
As part of our commitment to fair compensation practices, we do not ask for or consider current or past salaries in making compensation offers at hire. Instead, our compensation offers are determined by the specific requirements of the position, prevailing market trends, applicable collective bargaining agreements, pay equity for the position type, and individual qualifications and skills relevant to the performance of the position.
Minimum SalaryUSD $140,200.00/Yr.
Maximum SalaryUSD $228,800.00/Yr.
