Cyber Security Analyst; ISSO

Savannah River National Laboratory (SRNL) is seeking an Cyber Security Analyst (ISSO) to join our Cyber team! The selected individual will serve as the owner of the day-to-day execution of the NIST Risk Management Framework for assigned systems throughout their lifecycle. This is a full-time position ideal for someone with hands-on ISSO or security control assessor experience in a government-contractor environment.

The ISSO must team with many professionals across the lab and with the DOE assigned Information System Security Manager to ensure the boundary security controls are in place and maintained.

• Develop, maintain, and oversee System Security Plans and other boundary supporting documents in accordance with the NIST RMF and applicable policies
• Act in owner/oversight capacity for day-to-day cybersecurity functions for the assigned systems, ensuring controls are implemented correctly, operating as intended, and documented correctly
• Manage and track all risks for the boundary in designated risk registers and prepare a consolidated annual boundary risk assessment.
• Oversee information security categorizations of new and/or updated security categorizations for system/applications with the data owners (FIPS 199 and NIST SP 800-60)
• Ensure proper selection and tailoring of security controls are documented with clear and concise implementations
• Participate in the SRNL Change Review Board
• Maintain and ensure execution of the continuous monitoring strategy for the (AO) approved controls
• Prepare a Security Authorization Packages for new projects and for the boundary for submission to DOE for obtaining or renewing an Authority to Operate
• Coordinate activities with compliance assessment teams, providing artifacts and evidence of compliance as requested
• Take ownership of any issues in Security Assessment Report related to the systems assigned
• Support in a timely manner external audits, FISMA reporting, and other Data Calls
• Assist in identifying acceptable risk tolerances for the AO/AODR where appropriate for SRNL to manage internally any item with negligible to very low risks for the boundary
• Support and guide Project Security Officers within the boundary with security management of their systems in accordance with their appointment letters
• Conduct or review and approve security impact analysis for systems and networks undergoing significant security changes that could affect the system's authorization status.
• Provide timely notification to the AO/AODR for incidents and changes that may affect the system's authorization status
• Maintains mutually beneficial partnerships with other functions and seeks support for functional projects within and outside the function

Minimum Qualifications:

• Bachelor's degree in Computer Science, Information Management/Assurance, or similar
• 7 years of relevant experience in contractor-federal appointed ISSO or Security Control Assessor role
• Have demonstrated proficiency in NIST Risk Management Framework and Security Control Sets (i.e., NIST 800-37 and NIST 800-53)
• For ability to obtain and maintain a security clearance, US Citizenship is Legally Required

Preferred Qualifications:

• Current of former experience with DOE cybersecurity or a federal-contractor cybersecurity technical position
• Strong attention to detail and writing skills leading to accurate, clear, and concise control implementations that withstand scrutiny
• Ability to produce accurate, well-structured and audience appropriate security documentation able to be understood by assessors, technical teams, system owners and senior leaders/managers
• Effective verbal briefing with the ability to translate technical information into business/mission risk impacts
• Soft skills to include excellent communication and interpersonal skills, strong attention to detail, ability to multi-task and to collaborate in a team environment
• Experience with information assurance and cyber tools (GRC, Tenable.
  
  SC, Nessus, Splunk, etc.)
• Ability to quickly learn new technologies, concepts, and processes
• Active DOE L or Q clearance

"We put science to work!"

Savannah River National Laboratory (SRNL) is a multi-program laboratory applying state of the art science and practical, high-value, cost-effective solutions to complex technical problems to protect the nation. Located at the U.S. Department of Energy's (DOE) Savannah River Site (SRS) in Aiken SC, the laboratory develops and deploys innovative technologies to address some of the nation's environmental, energy, and national security challenges.

Battelle Savannah River Alliance (BSRA) is constantly assessing trends to provide the best possible benefits to our workforce. We also negotiate cost effective premiums that will meet the needs of our evolving workforce.

Some of the
* Benefits offered to employees include:

* Benefits vary based upon employment status

• Highly competitive Medical, Dental, and Vision options including HSA options with company provided seed
• Short- & Long-Term Disability (company paid)
• Life Insurance Non-Contributary 1X salary…