SMC Cybersecurity Analyst

Essential Job Functions and Responsibilities: (Knowledge, skills, and behaviors required for this position.) 

• Identify cyber capabilities strategies for custom hardware and software development based on mission requirements. Conduct and/or support authorized penetration testing on enterprise network assets. Evaluate network infrastructure vulnerabilities to enhance capabilities being developed. Build, install, configure, and test dedicated cyber defense hardware. Assist in assessing the impact of implementing and sustaining a dedicated cyber defense infrastructure. 
• Conduct technology assessment and integration processes.  
• Provide and support a prototype capability and/or evaluate its utility. 
• Collaborate with others to identify and/or develop appropriate solutions technology. Design and develop new tools/technologies related to cybersecurity. Identify functional- and security-related features to find opportunities for new capability development to exploit or mitigate vulnerabilities. Troubleshoot prototype design and process issues throughout the product design, development, and pre-launch phases. 
• Develop data management capabilities (e.g., cloud-based, centralized cryptographic key management) to include support to the mobile workforce. Review and validate data mining and data warehousing programs, processes, and requirements. 
• Review and validate data mining and data warehousing programs, processes, and requirements. 
• Research current technology to understand capabilities of required system or network. 
• Identify cyber capabilities strategies for custom hardware and software development based on mission requirements. 
• Collaborate with stakeholders to identify and/or develop appropriate solutions technology. 
• Design and develop new tools/technologies related to cybersecurity. 
• Evaluate network infrastructure vulnerabilities to enhance capabilities being developed. 
• Troubleshoot prototype design and process issues throughout the product design, development, and pre-launch phases. 

• Identify functional- and security-related features to find opportunities for new capability development to exploit or mitigate vulnerabilities. 
• Identify and/or develop reverse engineering tools to enhance capabilities and detect vulnerabilities. 
• Develop data management capabilities (e.g., cloud-based, centralized cryptographic key management) to include support to the mobile workforce. 
• Research and evaluate available technologies and standards to meet customer requirements. 
• Maintain knowledge of applicable cyber defense policies, regulations, and compliance documents specifically related to cyber defense auditing. Research current technology to understand capabilities of required system or network. 
• Implement Risk Management Framework (RMF)/Security Assessment and Authorization (SA&A) requirements for dedicated cyber defense systems within the enterprise, and document and maintain records for them. 
• This position interacts primarily with the ISSM/ISSOs and local staff.  
• The Analyst utilizes knowledge and expertise to analyze all security aspects of an IS and will assist in the day-to-day security operations of the system. 
• Job tasks include risk assessments for requested hardware, software, and both medical and non-medical Portable Electronic Devices.  
• In coordination with the ISSM/ISSO, the Cyber Technical Analyst may be asked to assist in incident handling and security training and awareness as it relates to the IS.
• Other duties as assigned. 

Physical Requirements: 

While performing the duties of this classification, the employee is frequently required to stand, walk, sit, stoop, kneel, bend, and work in an office and laboratory environment. The job requires hand/finger dexterity to keyboard or type, handle materials, manipulate tools, and reach with hands and arms. The job requires operation of job-related equipment and driving a vehicle. The employee must occasionally lift and/or move up to 30 pounds without assistance. Sufficient visual acuity and hearing capacity to perform the essential functions and interact with people is required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. 

Job Information:

• The pay range for this position is:  Level 2 ($79,344 - $162,732)  / Level 3 ($95,256 - $195,288). At Idaho National Laboratory compensation decisions are determined using factors such as education, relevant experience, and other credentials.
• Multi-Level: This is a multi-level posting and you will be placed at the appropriate level dependent on depth and breadth of proven experience and skills.
•  TDP: This is a testing designated position; you will be required to submit to a pre-employment drug screen and periodic drug testing throughout the term of your employment.
• Work is schedule is 4x10's out of the SMC.

Working Conditions: 

Incumbent of the position performs in a typical office setting with appropriate climate controls with laboratory field work subjected to variable weather. The noise level is generally moderate, with some exposure to high noises (>85 dB). Periodic travel required in normal course of job performance. Periodic safety training is necessary. Position may occasionally be required to work special shifts or weekends in support of programs, shifts more than 8 hours and work alone. 

 The above statements are intended to describe the general nature and levels of work being performed by people assigned to this classification.  They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel so classified. 

Security and Privacy Language:
This position includes information security and privacy responsibilities as defined by NIST SP 800 53, OMB Circular A 130, and DOE Order 206.1A. Position must complete initial and annual role-specific training as required. The incumbent must sign and comply with all required access agreements prior to being granted access to organizational systems or data. Comply with all applicable information security and privacy policies and procedures by following established protocols, with an understanding that non-compliance may result in sanctions.  

Level Definers  

EX2 – Intermediate: 

• Knowledge: Developing professional expertise. Applies company policies and procedures to resolve a variety of issues. Frequent use and application of standards, principles, theories, concepts, and techniques. 

• Problem Solving: Provides solutions to a variety of problems of moderate scope and complexity. Exercises judgment within defined procedures and practices to determine appropriate action. 
• Discretion and Latitude: Works under general supervision on routine work, detailed instructions on new projects/assignments. Follows established procedures. Work is reviewed for soundness of judgment, overall adequacy, and accuracy. 
• Impacts: Contributes to completion of milestones associated with specific work assignments. Failure to achieve results or erroneous decisions or recommendations may cause delays in program work. 
• Liaison: Primarily internal company contacts. Infrequent interorganizational and outside customer contacts on routine matters. 
• Education/Experience:  Bachelor’s and 2 years of experience. Master’s and 0. PhD and 0. 

EX3 – Career: 

• Knowledge: Complete understanding and wide application of principles, theories, and concepts in field of specialization. General knowledge of other related disciplines. Resolves a wide range of issues in creative ways. This level is fully qualified, career oriented. 
• Problem Solving: Works on problems of diverse scope. Demonstrates good judgment in selecting methods and techniques for obtaining solutions. Solutions are imaginative, thorough, practical, and consistent with organizational objectives. 
• Discretion and Latitude: Works under only general direction. Normally receives little instruction day-to-day. Independently determines and develops approach to solutions. Work is reviewed upon completion for adequacy in meeting objectives. 
• Impacts: Contributes to completion of specific programs and projects. Failure to obtain results or erroneous decisions or recommendations would typically result in program delays. 
• Liaison: Frequent internal organizational customer contacts. May have some outside contact or represent organization in providing solutions to difficult issues associated with specific projects or work. 
• Education/Experience:  Bachelor’s and 5 years. Master’s and 2 years. PhD and 2 years.  years.