Cyber Specialist (Multi-level)

Savannah River Mission Completion; Aiken (SC); On-site; USD 56,000 - 188,000; Full time

Benefits offered by this job

401k Retirement Savings Plan

Health Insurance

Paid Time Off

Tuition Reimbursement

Job summary

Savannah River Mission Completion (SRMC) is seeking Cyber Specialists to join the Aiken, SC location on the Savannah River Site. The role covers vulnerability assessments, penetration testing, and risk assessment in a federally regulated environment, with duties ranging from analyst to principal levels.

Responsibilities include evaluating incidents, supporting security program design, and producing documentation such as System Security Plans and Controls Deviations.

Qualifications

• Bachelor's degree in computer science, information technology or equivalent with security emphasis.
• Experience in a regulated DOE/federally compliant environment.
• Experience with security scanning, patch management and configuration management.
• Experience in application penetration testing.
• Knowledge of FIPS/NIST guidelines.
• Experience using Nessus and Shavlik.
• Ability to perform risk assessments of IT/OT systems.

Responsibilities

• Performs routine assessments of systems and networks and identifies deviations from policy.
• Assesses cyber security incidents, procedures and capabilities.
• With guidance, evaluates and exploits vulnerabilities for data gathering.
• Supports penetration testing to disrupt or degrade information systems.
• Analyzes data from monitoring and logs to identify issues for investigation.
• Contributes to risk assessments and documentation such as SSPs and CM plans.
• Other duties as assigned.

Skills

Cybersecurity

Penetration testing

Vulnerability assessment

Network security

DOE Regulations

Education

Bachelor's degree in computer science, information technology or equivalent

Tools

Nessus

Shavlik

Job description

Overview

Savannah River Mission Completion (SRMC) is seeking Cyber Specialiststo be based in our Aiken, SC location on the Savannah River Site (SRS).

The Cyber Specialist (Associate level to Principal level) conducts network or software vulnerability assessments and penetration testing for the organization, as established by the United States Department of Energy (DOE) orders and policies on Cyber Security. Isolates, blocks or removes threat access. Evaluates system security configurations. Performs data analysis on network and log monitoring information. Supports the design and administers cyber user awareness programs. Supports the performance of risk assessment on new or modified systems and networks. Provides appropriate documentation to adhere to relevant regulations and achieve organization objectives.

Responsibilities

Responsibilities at the Associate Cyber Specialist or Cyber Specialist level:

• Performs routine and/or basic assessments of systems and networks within the networking environment or enclave and identifies systems and networks that deviate from acceptable configurations, enclave policy, or local policy.
• Supports the evaluation of cyber security incidents, procedures and capabilities.
• With guidance from more senior specialists, evaluates and exploits system and network vulnerabilities and misconfigurations for purposes of gathering data from target or adversary automated information systems or networks and to enable operations and intelligence collection capabilities.
• Assists with leveraging penetration testing capabilities on computer networks to disrupt, deny, degrade, or destroy information resident in computers and computer networks, or the computers and networks.
• Assists with analysis of data obtained through network security monitoring and log monitoring of systems, evaluates against provided data sources and threat intelligence feeds, and identifies potential issues for further investigation.
• Provides input to the development and maintenance of the Certification and Accreditation package in a DOE cyber security environment; including development of System Security Plans, Security Controls Deviations, Contingency and Disaster Recovery Plan, Configuration Management Plan, and other necessary documents.
• Provides support to the performance and documentation of risk assessments on new equipment, software, applications, and hardware against the current environment.
• Other duties as assigned.

Additional Responsibilities at the Senior I or Principal Cyber Specialist level:

• Will perform as the Information System Security Officer (ISSO)
• Utilizing knowledge of a federally regulated environment and support from lead, develops and evaluates procedures necessary to implement cyber requirements.
• Participates in Contingency Plan, Recovery Plan and Incident Response training and tests for assigned information technology (IT)/ Operational Technology (OT) systems.
• Participates in Incident Response activities for assigned IT/OT systems.
• Serves as support on assigned IT system(s) and brief on all matters, technical and otherwise, involving the cybersecurity posture of the system - including notifications to the system owner, the CIO, and DOE
• Works with technical teams to mitigate security control deficiencies for assigned IT/OT systems.
• Assesses the cybersecurity impact of changes to assigned IT/OT systems.
• Updates hardware and software inventories to reflect changes to assigned IT/OT systems as needed.
• Provides technical cybersecurity expertise on IT/OT operational projects throughout the Software Development Lifecycle
• Other duties as assigned.

This is a multilevel posting. Candidate(s) selected to receive an offer will be offered the position level commensurate with their experience and qualifications.

Qualifications

• Bachelor's degree in computer science, information technology or equivalent field and experience working in an information technology field with an emphasis in security

Additional Information:

• Individuals not possessing a four-year degree may qualify with related education and/or experience.

Preferred Qualifications

Preferred Qualifications for a Cyber Specialist:

• Computer Science degree with an emphasis on cyber security
• Experience as either a system or network administrator
• Responsible for maintaining the security profile of systems and/or networks
• Experience using the following types of software: security scanning, patch management, and configuration management
• Experience working in a regulated environment
• Experience in application penetration testing
• Experience using Nessus and Shavlik
• Contributed to the development and maintenance of an Accreditation Package in a DOE environment
• Knowledgeable on FIPS and NIST guidelines.

Additional Preferred Qualifications for a Senior I or Principal Cyber Specialist:

• Experience working in a DOE or federally regulated environment
• Knowledgeable on FIPS 199, NIST 800-53, NIST 800-53a, NIST 800-70, NIST 800-37 (and other NIST guidance documentation)
• International Information System Security Certification Consortium certification (ISC)2, Certified Information Security System Professional (CISSP)
• Knowledgeable on DOE Ord. 205.1a/b

About

Savannah River Mission Completion (SRMC), a prime contractor for the US Department of Energy, is responsible for managing the Department of Energy’s Savannah River Site’s Liquid Waste operations contract. Located in Aiken, South Carolina, SRMC is a limited liability company formed by nuclear operations and environmental remediation global leaders BWXT, Amentum, and Fluor. The SRMC Team is responsible for the closure of waste tanks, the operation of the Savannah River Site’s Defense Waste Processing Facility, tank farm operations and associated production and disposal facilities. www.savannahrivmissioncompletion.com

Benefits

Savannah River Mission Completion offers a competitive and comprehensive benefits package with flexibility to meet your needs.

Highlights of our plans include:

• 401k Retirement Savings Plan – 5% immediate company contribution, additional matching for employee contributions
• Health Insurance & Prescription Drug Program
• Health Savings Account
• Telehealth with BlueCare on Demand
• Dental Coverage
• Vision Coverage
• Flexible Spending Accounts
• Includes 160 hours annual paid time off (accrued monthly), plus 11 paid holidays
• Paid Parental Leave
• Life and Accident Coverage
• Disability Coverage
• Employee Assistance Program
• Tuition Reimbursement

Minimum Pay

USD $56,000.00/Yr.

Maximum Pay

USD $188,000.00/Yr.

Pay Disclaimer

Exceptions to this range/rate may be applied on a case-by-case basis taking into account aspects such as education, experience, and skill need of the organization.

EEO Statement

Savannah River Mission Completion is committed to equal employment opportunity to employees and qualified applicants regardless of their race, color, religion, gender, national origin, age, physical or mental disability, veteran status, status as a parent, sexual orientation, or genetics. Our equal employment opportunity policies encompass all aspects of the employment relationship, including application and hiring, promotion and transfer, selection for training opportunities, wage and salary administration.