Description

Job Title Information System Security Officer (Cybersecurity Technical Staff 2/3)

Location Los Alamos, NM, US

Organization Name SSO-3/Special Security IT & Cyber Operations

Minimum Salary

Maximum Salary

This position is open for external candidates only to apply.
What You Will Do
This position will be filled at either the Cybersecurity Technical Staff 2 or 3 level, depending on the skills of the selected candidate. Additional job responsibilities (outlined below) will be assigned if the candidate is hired at the higher level.

Information System Security Officer (CTS-2) $90,000 - $147,100
We are seeking an Information System Security Officer (ISSO) to support both a highly technical Windows/Linux accredited environment and services within Amazon Web Services (AWS) on the Commercial Cloud Enterprise (C2E) platform. The ISSO will contribute to a portfolio of exciting and high-impact national security scientific research.

In this role, you will collaborate with interdisciplinary teams to design secure, high-performance computing solutions that drive world-class scientific outcomes for our stakeholders. The Special Security IT and Cyber Operations group (SSO-3) is an integral part of the Sensitive and Special Operations (SSO) Division at Los Alamos National Laboratory (LANL), focusing on implementation of IT and network technologies for high security environments.

The SSO Division is responsible for the operation of special security facilities at LANL and remote sites, enabling cutting-edge work in Emerging Threats, Energy Security, and Nuclear Threats and Deterrence. Our dedicated teams architect and implement secure computing environments used to tackle the nation's toughest challenges in global and nuclear security.

Cybersecurity Technical Staff 2 $96,000 - $158,000
As a member of the Special Security Cyber Operations Team, your responsibilities will include:

• Assisting the ISSM in development, implementation, and evaluation of the cybersecurity program for classified computing systems within the LANL Field Intelligence Element (FIE).
• Participating in or leading projects that address significant and/or complex cyber issues, working with multi-disciplinary teams to analyze and interpret national cybersecurity requirements in support of scientific research.
• Identifying, developing, and implementing solutions to address cyber threats and vulnerabilities.
• Evaluating and recommending new tools to strengthen the FIE's cybersecurity posture.
• Contributing to security reviews, assessments, security plan development, and related documentation for classified systems.

Cybersecurity Technical Staff 3 $1 $117,200 - 195-400

In addition to what was outlined at the lower level, at this level, candidates will have proven success performing highly technical work in accredited environments or leading cybersecurity related teams to success in accredited environments as outlined in the Minimum Job Requirements for a CTS-3.

• Serving as primary or alternate ISSO for the Department of Energy's Office of Intelligence and Counterintelligence (DOE-IN) for Strategic Partner information systems.
• Implementing the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF), in accordance with Intelligence Community Directive (ICD) 503, the Committee for National Security Systems publications, and NIST Special Publications (SP) 800 series.
• Performing continuous monitoring activities in support of ongoing authorizations and maintaining effective monitoring of security controls. This includes risk assessments, self-assessments, account management, configuration management, vulnerability management, and auditing of information systems.
• Developing and maintaining authorization packages, including System Security Plans (SSPs), Plans of Actions and Milestones (POA&Ms), and Security Assessment Reports (SARs).
• Supporting secure system deployment and operations in AWS Classified Regions (Secret and Top Secret).

What You Need

Minimum Job Requirements:

• Proficiency in the implementation of the NIST RMF for national security systems in accordance with all applicable NIST publications, DOE orders, DOE-IN policies, ICDs, and other government agency governing requirements.
• Hands-on experience with AWS Commercial Cloud Enterprise (C2E) environments and AWS security services such as IAM, GuardDuty, CloudTrail, and KMS. Candidates must have prior cyber-related work experience within AWS environments.
• Understanding of distributed systems, architectures, and network protocols.
• Experience developing and maintaining comprehensive authorization packages.
• Strong technical writing abilities and effective stakeholder communication skills.

Additional Job Requirements for Information System Security Engineer 3 (CTS-3):
In addition to the requirements outlined above, qualification at the higher level requires:

• Secure Systems Integration: Knowledge of cross-domain solutions (CDS), multi-cloud integration, and data flow protections for classified workloads.
• Cybersecurity Governance: Proven experience with DOE, DoD, and/or Intelligence Community (IC) cybersecurity directives and governance processes.
• Leadership and Mentorship: Proven experience mentoring technical staff, leading teams, and managing cybersecurity projects in mission-critical environments.
• Technical Innovation: Demonstrated ability to identify, evaluate, and deploy emerging cybersecurity tools and technologies.

Education/Experience at lower level: Position requires a Bachelor's degree in a technical field and a minimum of 5 years' related experience, or an equivalent combination of education and experience. At this level post graduate work may be expected.

Education/Experience at higher level: Position requires a Bachelor's Degree in a technical field and a minimum of 8 years related experience; or, an equivalent combination of education and experience directly related to the occupation. At this level post graduate work may be expected.

Desired Qualifications:

• Master's Degree in cybersecurity, information assurance, or related technical field.
• Active Q or Top-Secret clearance.
• Active Sensitive Compartmented Information (SCI) access (or ability to obtain).
• DoDD 8570 IAM Level 1, or equivalent certification. Cloud+ preferred.
• Experience in SCI or Special Access Program (SAP) environments.
• Knowledge of DOE/DoD cybersecurity policies.

Work Environment:

Work Location : The work location for this position is onsite and located in Los Alamos, NM. All work locations are at the discretion of management.

Position commitment: Regular appointment employees are required to serve a period of continuous service in their current position in order to be eligible to apply for posted jobs throughout the Laboratory. If an employee has not served the time required, they may only apply for Laboratory jobs with the documented approval of their Division Leader. The position commitment for this position is 1 year.

Note to Applicants:

Due to federal restrictions contained in the current National Defense Authorization Act, citizens of the People's Republic of China-including the special administrative regions of Hong Kong and Macau-as well as citizens of the Islamic Republic of Iran, the Democratic People's Republic of Korea (North Korea), and the Russian Federation, who are not Lawful Permanent Residents ("green card" holders) are prohibited from accessing facilities that support the mission, functions, and operations of national security laboratories and nuclear weapons production facilities, which includes Los Alamos National Laboratory.

Employment Status Full Time

Appointment Type Regular

Regular