Cyber Security Analyst 1

Overview PNNL seeks a Cyber Security Analyst to join our Cyber Security Operations Center (CSOC) team. We are seeking someone with a passion for cyber security who strives to deeply understand our adversaries, develop innovative analytics and detection solutions and proactively hunt and respond to adversary actions against PNNL. Equally, you’ll need to be comfortable operating as a member of continually evolving culture of collaboration, creativity, partnership, and execution. This team member will help grow and create a culture of security innovation within the framework of an industry-standard security operations center. Responsibilities Monitors against authorized security control requirements and provides continuous monitoring assessments of the risk represented by system and application configurations or vulnerabilities. Leverages data sources to prevent, detect, respond and remediate internal and external attacks or attempts to gain unauthorized access to internal and/or external information, network, or data systems. Interprets, analyzes, and executes incident response actions for detected intrusion anomalies and events. Ensures all events and anomalies are investigated, documented and reported in accordance with established processes and procedures. Conducts system, network, or software vulnerability assessments and penetration testing in accordance with established processes and procedures. Manages and operates tools specific and necessary for cyber security operations functions. Providing an adversary mindset and understanding that drives a kill-chain activity-based approach to detection, response, and recovery Providing continuous monitoring of authorized security control requirements and reporting system risks, application configurations or vulnerabilities Intercepting and preventing internal and external attacks against PNNL systems Assessing open-source reporting and situational awareness data feeds to ensure the security of laboratory information and technology systems Interpreting, analyzing, and executing incident response actions for detected intrusions Occasional weekend or evening “on-call” duties may be required to include rotational support schedules as well as infrequent, ad hoc emergency incident response coordination. Qualifications Minimum Qualifications: BS/BA with 0-1 years of experience. MS/MA with 0 years of experience Preferred Qualifications: Strong peer leadership, interpersonal, collaborative, and customer relationship skills are essential. Basic understanding of the cyber kill chain or attack vectors, red teaming and proactive cyber adversary hunting. Ability to conduct incident response lifecycle activities across detection & analysis, investigation & response and recovery Performing forensic analysis of digital information and gathers and handles evidence. Identifies network computer intrusion evidence and perpetrators. Ability to implement and operate intrusion detection/prevention systems, network penetration testing, vulnerability scanning, packet generators and sniffers, firewalls, and router systems. Working independently and leading collective team efforts to develop theories, ideas, and concepts around cyber security methodologies. Hazardous Working Conditions/Environment Not Applicable Additional Information This position requires the ability to obtain and maintain a federal security clearance. Requirements: * U.S. Citizenship * Background Investigation: Applicants selected will be subject to a Federal background investigation and must meet eligibility requirements for access to classified matter in accordance 10 CFR 710, Appendix B. * Drug Testing: All Security Clearance (L or Q) positions will be considered by the Department of Energy to be Testing Designated Positions which means that they are subject to applicant, random, and for cause drug testing. In addition, applicants must be able to demonstrate non-use of illegal drugs, including marijuana, for the 12 consecutive months preceding completion of the requisite Questionnaire for National Security Positions (QNSP). Testing Designated Position This position is a Testing Designated Position (TDP). The candidate selected for this position will be subject to pre-employment and random drug testing for illegal drugs, including marijuana, consistent with the Controlled Substances Act and the PNNL Workplace Substance Abuse Program. About PNNL Pacific Northwest National Laboratory (PNNL) is a world-class research institution powered by a highly educated, diverse workforce committed to the values of Integrity, Creativity, Collaboration, Impact, and Courage. Every year, scores of dynamic, driven people come to PNNL to work with renowned researchers on meaningful science, innovations and outcomes for the U.S. Department of Energy and other sponsors; here is your chance to be one of them! At PNNL, you will find an exciting research environment and excellent benefits including health insurance, flexible work schedules and telework options. PNNL is located in eastern Washington State—the dry side of Washington known for its stellar outdoor recreation and affordable cost of living. The Lab’s campus is only a 45-minute flight (or ~3 hour drive) from Seattle or Portland, and is serviced by the convenient PSC airport, connected to 8 major hubs. Commitment to Excellence, Diversity, Equity, Inclusion, and Equal Employment Opportunity Our laboratory is committed to a diverse and inclusive work environment dedicated to solving critical challenges in fundamental sciences, national security, and energy resiliency. We are proud to be an Equal Employment Opportunity and Affirmative Action employer. In support of this commitment, we encourage people of all racial/ethnic identities, women, veterans, and individuals with disabilities to apply for employment. Pacific Northwest National Laboratory considers all applicants for employment without regard to race, religion, color, sex (including pregnancy, sexual orientation, and gender identity), national origin, age, disability, genetic information (including family medical history), protected veteran status, and any other status or characteristic protected by federal, state, and/or local laws. We are committed to providing reasonable accommodations for individuals with disabilities and disabled veterans in our job application procedures and in employment. If you need assistance or an accommodation due to a disability, contact us at [email protected]. Drug Free Workplace PNNL is committed to a drug-free workplace supported by Workplace Substance Abuse Program (WSAP) and complies with federal laws prohibiting the possession and use of illegal drugs. Mandatory Requirements Battelle requires employees to have a COVID-19 vaccine as a condition of employment, subject to accommodation. Applicants are required to disclose their vaccination status following a conditional offer of employment and must attest to being fully vaccinated with a Center for Disease Control (CDC)-approved COVID-19 vaccination, or provide documentation of need for medical or religious exemption from the COVID-19 vaccination requirement.