Job Description We have an opening for a
Cyber Security Security Control Assessor. You will perform a wide range of activities associated with cyber security. The position is within the Information Technology Solutions Division (ITSD) of the Computing Directorate matrixed to the Cyber Security Program (CSP) in support of the LivIT Program. This position is a hybrid work schedule combination of remote and in-office, typically requiring on-site presence several days per week.
This position offers a hybrid schedule, blending in-person and virtual presence. You will have the flexibility to work from home one or more days per week.
This position will be filled at eitherlevel based on knowledge and related experience as assessed by the hiring team. Additional job responsibilities (outlined below) will be assigned if hired at the higher level.
You will- Identify security concerns by analyzing computer system security control requirements and implementations to determine unmitigated risks to computer operating systems, networks, and cloud services.
- Analyze moderately complex information system security plans and testing documents and assist programs in the development of testing procedures and security plan documentation.
- Perform comprehensive assessments in information systems and cloud services in support of ongoing authorization of information systems and cloud services.
- Conduct Cyber Security Program self-assessments and contribute to the development and completion of corrective action plans when needed for programs and CSP.
- Participate in external cyber security auditing functions in the response, collection of data, preparation of reports to outside agencies, and organizations internal/external to the Laboratory.
- Evaluate technical security controls , cyber security processes, procedures and policies for efficiency and accuracy.
- Perform other duties as assigned.
Additional job responsibilities, at the SES.2 level- Manage multiple tasks and priorities of customers and stakeholders, ensuring deadlines are met, while leveraging team member skills.
- Perform technical assessments, document actions, findings, and make remediation recommendations.
Qualifications - Ability to secure and maintain a U.S. DOE Q-level security clearance which requires U.S. citizenship.
- Bachelor's degree in Computer Science, Computer Engineering, Computer Information Systems, or the equivalent combination of education and related experience.
- Knowledge of computer, network technologies and cyber security frameworks.
- Experience performing cyber security risk analysis or demonstrated research skills (the ability to search for, locate, extract, organize, evaluate, and use or present information that is relevant to a particular topic).
- Ability to tackle challenging problems with creativity and adaptability, while remaining flexible to shifting priorities.
- Effective verbal, written, and interpersonal communication skills necessary to collaborate in a multi-disciplinary team environment and communicate technical information, document work, and prepare and present technical information.
- Ability to effectively manage concurrent technical tasks with conflicting priorities and demonstrated advanced organizational skills, attention to detail, accuracy and follow through.
Additional qualifications at the SES.2 level- Experience providing innovative approaches and applying new technologies to broadly defined tasks and projects.
- Broad experience applying effective analytical and problem-solving skills to moderately complex problems.
- Experience in either hands-on information technology, cybersecurity engineering, or cybersecurity auditing and assessment.
Qualifications We Desire- Knowledge of risk mitigation requirements for computer operating systems, network, or cloud services.
- Knowledge of the National Institute of Standards and Technology (NIST) Special Publication 800-53 (Security and Privacy Controls for Information Systems and Organizations).
- Applicable Cyber Security certifications (CISSP, CompTIA Network+, CompTIA Security+, CompTIA Cloud+, Certified Cloud Security Professional, or similar), participating in Capture The Flag (CTF) events, or attendance of cyber security conferences/lectures.
Pay Range$121,830 - $185,544 Annually
$121,830 - $154,500 Annually for the SES.1 level
$146,340 - $185,544 Annually for the SES.2 level
This is the lowest to highest salary we in good faith believe we would pay for this role at the time of this posting; pay will not be below any applicable local minimum wage. An employee's position within the salary range will be based on several factors including, but not limited to, specific competencies, relevant education, qualifications, certifications, experience, skills, seniority, geographic location, performance, and business or organizational needs.
Additional Information #LI-Hybrid
Position InformationThis is a Flexible Term appointment, which is for a definite period not to exceed six years.If final candidate is a Career Indefinite employee, Career Indefinite status may be maintained (should funding allow).
