Cybersecurity Analyst

Overview

Responsibilities

The Cybersecurity Analyst for the WIPP General Support System (GSS) Boundary will report to the Information System Security Manager (ISSM).

• Operate, monitor, manage, and maintain hardware asset, software asset, and vulnerability management tools.
• Review vulnerability scan results, remediate vulnerabilities, and provide recommendations for timely remediation of vulnerabilities on systems within the purview of other IT teams.
• Monitor the network utilizing the security information and event management (SIEM) system, configure alerts, and implement additional monitoring capabilities as needed.
• Support the ISSM, ISSOs, and cybersecurity specialists including the Industrial Control Systems (ICS), with implementing technical controls and enforcing IT and Cybersecurity policies and procedures and make recommendations for improving documentation and cybersecurity tools.
• Participate in certification and accreditation (C&A) and information security continuous monitoring (ISCM) activities.
• Participate as a member of the incident response team.
• Develop and maintain configuration management documentation for various cybersecurity software and systems.

Minimum Requirements

• Master’s degree in Cybersecurity, Information Technology, or other related field with one (1) year of working experience, or
• Bachelor’s degree with three (3) years of working experience, or
• Associate’s degree with seven (7) years of working experience, or
• High School Diploma or Equivalency with eleven (11) years of working experience is required.
• Experience in at least one (1) of the following areas: knowledge of current security tools, network and IT infrastructure, hardware/software security implementation.
• Ability to read, understand, and incorporate Department of Energy Orders, Federal Regulations, FISMA, NIST, and other Federal Laws and Directives.
• Must have strong oral and written communication skills.
• Must be at least 18 years of age; U.S. citizenship is required except in limited circumstances. See DOE Order 472.2 for additional information.

Preferred Requirements

• DOE Contractor experience preferred.
• Experience working with DOE orders and requirements is a plus.
• Working knowledge of governmental IT requirements and IT policies/procedures.
• Experience with system information and event management (SIEM), vulnerability assessment, and penetration testing tools.
• Knowledge of operational technology and industrial control system environments.
• System administration, networking, and/or programming experience a plus.
• CISSP or other security related certifications.

What We Offer

• Medical, dental and vision insurance: Coverage on date of hire
• Surgical concierge service
• EAP services including wellness plans, estate planning, financial counseling and more
• Modern work arrangements to include 4-day workweeks (four 10-hour days)
• Relocation assistance
• Shuttle commuter service from the local areas
• Paid time off (PTO) and paid holidays
• Tuition reimbursement program
• On-site fitness center and other wellness support including some public gym membership reductions
• Company paid short term disability
• Company paid life insurance (1x annual salary)
• Pension plan that provides monthly annuity after retirement and 401(k) with .50 matching up to 6%
• Voluntary benefits of:
• Accident, Critical Illness, and Hospital Indemnity
• Long-term disability program
• Health and Flexible savings accounts
• Life and accidental death and dismemberment insurance

Equal Opportunity

Equal employment opportunity, including veterans and individuals with disabilities.

Posting Duration

This posting will be open for application submissions for a minimum of seven (7) calendar days, including the posting date. SIMCO reserves the right to extend the posting date at any time.