Critical Infrastructure Cyber Protection & Defense Analyst

Idaho National Laboratory; Idaho Falls (ID); Hybrid; USD 79,000 - 195,000; Full time

Job summary

Idaho National Laboratory is seeking a Critical Infrastructure Cyber Protection & Defense Analyst to advance ICS cybersecurity for critical infrastructure. The role involves consulting, threat identification, and remediation of unauthorized activities within a high-security environment.

The candidate will lead cyber security efforts, collaborate with stakeholders, and address diverse customer needs across sectors, with potential remote or hybrid work options and a multi-level posting.

Qualifications

• Bachelor of Science degree in engineering, cyber security, or business/financial management.
• Experience commensurate with level; design or apply control systems cyber security solutions.
• Must obtain and maintain a DOE Q clearance and SCI access.

Responsibilities

• Deliver professional cyber consulting to advance ICS cybersecurity for critical infrastructure.
• Advise on cybersecurity designs, vulnerability identification, and mitigation techniques.
• Monitor critical infrastructure networks to remediate unauthorized activities.
• Respond to crises within critical infrastructure to mitigate threats.
• Lead cybersecurity efforts and deliver capability to customers.

Skills

ICS cybersecurity

Cybersecurity consulting

Threat identification

Crisis response

Education

Bachelor of Science degree

DOE Q clearance eligibility

Job description

Job Description

• Deliver professional advice, expertise, strategic insight, and other cyber-related consulting services to advance industrial control systems (ICS) cybersecurity for critical infrastructure.
• Provide advice and expertise in cybersecurity designs, implementation, vulnerability identification, and mitigation techniques and procedures that will aid industry and the Nation in securing critical infrastructure systems against current and emerging threats.
• Monitor critical infrastructure sector networks to actively remediate unauthorized activities.
• Respond to crises or urgent situations within critical infrastructure sectors to mitigate immediate and potential threats.
• Develop, research, and apply advanced mitigation, preparedness, and response and recovery approaches, as needed, to maximize survival of life, preservation of property, and information security.
• Lead cyber security efforts and deliver capability to customers.
• Promote an open and informal communication environment with both internal and external stakeholders at all levels in order to develop mutual trust and teamwork.
• Conduct information collection and analysis of United States critical infrastructure with particular emphasis on control systems and technology-controlled processes.
• Manage teams in the creation of cyber security products.
• Create related reports and provide briefings related to these issues.
• Conduct technical analysis projects.
• Work to fill gaps in current situational awareness across sectors and develop products to address the needs of a diverse customer set spanning multiple classification levels, federal, private, and international organizations.
• Other duties as assigned.

Job Description

• Deliver professional advice, expertise, strategic insight, and other cyber-related consulting services to advance industrial control systems (ICS) cybersecurity for critical infrastructure.
• Provide advice and expertise in cybersecurity designs, implementation, vulnerability identification, and mitigation techniques and procedures that will aid industry and the Nation in securing critical infrastructure systems against current and emerging threats.
• Monitor critical infrastructure sector networks to actively remediate unauthorized activities.
• Respond to crises or urgent situations within critical infrastructure sectors to mitigate immediate and potential threats.
• Develop, research, and apply advanced mitigation, preparedness, and response and recovery approaches, as needed, to maximize survival of life, preservation of property, and information security.
• Lead cyber security efforts and deliver capability to customers.
• Promote an open and informal communication environment with both internal and external stakeholders at all levels in order to develop mutual trust and teamwork.
• Conduct information collection and analysis of United States critical infrastructure with particular emphasis on control systems and technology-controlled processes.
• Manage teams in the creation of cyber security products.
• Create related reports and provide briefings related to these issues.
• Conduct technical analysis projects.
• Work to fill gaps in current situational awareness across sectors and develop products to address the needs of a diverse customer set spanning multiple classification levels, federal, private, and international organizations.
• Other duties as assigned.

Essential Job Functions and Responsibilities: (Knowledge, skills, and behaviors required for this position.)

• Deliver professional advice, expertise, strategic insight, and other cyber-related consulting services to advance industrial control systems (ICS) cybersecurity for critical infrastructure.
• Provide advice and expertise in cybersecurity designs, implementation, vulnerability identification, and mitigation techniques and procedures that will aid industry and the Nation in securing critical infrastructure systems against current and emerging threats.
• Monitor critical infrastructure sector networks to actively remediate unauthorized activities.
• Respond to crises or urgent situations within critical infrastructure sectors to mitigate immediate and potential threats.
• Develop, research, and apply advanced mitigation, preparedness, and response and recovery approaches, as needed, to maximize survival of life, preservation of property, and information security.
• Lead cyber security efforts and deliver capability to customers.
• Promote an open and informal communication environment with both internal and external stakeholders at all levels in order to develop mutual trust and teamwork.
• Conduct information collection and analysis of United States critical infrastructure with particular emphasis on control systems and technology-controlled processes.
• Manage teams in the creation of cyber security products.
• Create related reports and provide briefings related to these issues.
• Conduct technical analysis projects.
• Work to fill gaps in current situational awareness across sectors and develop products to address the needs of a diverse customer set spanning multiple classification levels, federal, private, and international organizations.
• Other duties as assigned.

Required

Education, Credentials, and Work Experience:

• Bachelor of Science degree in mechanical or electrical engineering, cyber security/computer sciences, and/or business/financial management from an accredited institution.
• Level 2 - Education/Experience: Bachelor’s and 2 years of experience. Master’s and 0. PhD and 0.
• Level 3 - Education/Experience: Bachelor’s and 5 years. Master’s and 2 years. PhD and 2 years.
• Relevant experience commensurate with level. Experience shall include designing or applying control systems cyber security solutions in critical infrastructure at the system and/or regional level.
• Obtain and maintain a Q security clearance and special access as required. When required, must be able to work in a secure work environment to include handling/storing/processing classified and CUI information, and adhere to physical and electronic projection standards.
• Testing Designated Position (TDP)

Special Requirements

• Must be a US citizen.
• Must be eligible for a DOE Q clearance (equivalent to Top Secret) and SCI access.
• Must be able to work under pressure, simultaneously addressing multiple complex tasks to meet commitments while maintaining quality of work and a professional interface.

Preferred

• Professional Engineer and/or Certified Information Systems Security Professional (CISSP) certifications.
• Relevant experience to include program/project management here at INL, particularly in the cyber security realm, and familiarity with industrial control systems. In-depth knowledge of the US energy sector and experience working with DOE, DOD and DHS and private industry on grid security-related projects is beneficial.

Physical Requirements

While performing the duties of this classification, the employee is frequently required to stand, walk, sit, stoop, kneel, bend, use hands to handle materials, manipulate tools, keyboard and type, reach with hands and arms, and operate job-related equipment. The employee must occasionally lift and/or move up to 30 pounds. Sufficient visual acuity and hearing capacity to perform the essential functions and interact with people is required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Job Information

Idaho National Laboratory is hiring a Critical Infrastructure Cyber Protection & Defense Analyst to work on our Infrastructure & Operations team. Our team works a 9x80 schedule located out of our REC facility with every other Friday off.

Remote or Hybrid work opportunities may be available for this position.

• The pay range for this position is: Level 2 ($79,344 - $162,732) / Level 3 ($95,256 - $195,288). At Idaho National Laboratory compensation decisions are determined using factors such as education, relevant experience, and other credentials.
• Multi-Level: This is a multi-level posting and you will be placed at the appropriate level dependent on depth and breadth of proven experience and skills.
• TDP: This is a testing designated position; you will be required to submit to a pre-employment drug screen and periodic drug testing throughout the term of your employment.
• Project Hire: These are project hire positions with an estimated duration of 1 year(+/-).

Working Conditions

The work environment is an office environment which may include stairs. The noise level is generally moderate; however, may be exposed to loud noises on occasion. Position requires working more than 8 hours/day, irregular hours, and working alone.

Security And Privacy Requirements

This position includes information security and privacy responsibilities as defined by NIST SP 800 53, OMB Circular A 130, and DOE Order 206.1A. Position must complete initial and annual role-specific training as required. The incumbent must sign and comply with all required access agreements prior to being granted access to organizational systems or data. Comply with all applicable information security and privacy policies and procedures by following established protocols, with an understanding that non-compliance may result in sanctions.

LevelDefiners

EX2 – Intermediate

• Knowledge: Developing professional expertise. Applies company policies and procedures to resolve a variety of issues. Frequent use and application of standards, principles, theories, concepts, and techniques.
• Problem Solving: Provides solutions to a variety of problems of moderate scope and complexity.