Cyber Counterintelligence Specialist

Job Title

Cyber Counterintelligence Specialist

Amarillo, TX

• Lead the planning, implementation, and daily operations of the PFO cyber counterintelligence program as the primary advisor to the Senior Counterintelligence Officer.
• Perform cyber forensics, including collection, preservation, and analysis of digital media or devices using industry-standard, court-approved standards.
• Consult and advise on diverse cyber issues, including scope, attack vectors, technology, collaboration, desired outcomes, and security considerations.
• Conduct proactive cyber counterintelligence activities to detect, deter, and neutralize threats targeting Pantex systems, networks, and personnel.
• Analyze cyber threat intelligence to identify foreign adversaries, their tactics, techniques, procedures, and motivations.
• Conduct briefings on CI issues to DOE personnel to enhance awareness and security posture.
• Provide counterintelligence support for intrusion incidents in classified and unclassified computer systems.
• Collaborate with cyber security, law enforcement, and USIC to analyze information, identify foreign intelligence involvement, and determine protective measures.
• Prepare and present comprehensive assessments and analyses, conveying facts, conclusions, estimates, and projections to DOE and USIC personnel.
• Maintain proficiency in current and emerging cyber technologies, threats, and counterintelligence methodologies.

• Meaningful work and unique opportunities to support missions vital to national and global security.
• Top-notch, dedicated colleagues across the DOE Counterintelligence program.
• Generous pay and benefits with a stable organization.
• Professional development opportunities.

• Bachelor’s degree with a minimum of 4 years of relevant experience.
• OR a master’s degree with a minimum of 3 years of relevant experience.
• OR a PhD.
• OR applicants without a bachelor’s degree may be considered based on a combination of at least 12 years of completed education and/or relevant experience.

• Minimum 3 years conducting or supporting cyber security investigations/incident response, CI investigations, or law enforcement investigations.
• Knowledge of investigative techniques, case documentation, evidence preservation, interviewing, and liaison with USG agencies.
• Knowledge of APT methodologies and cyber espionage techniques.
• Proficiency in network traffic analysis, log analysis, and SIEM tools.
• Familiarity with Python, VBA, or similar scripting languages; relational and non-relational databases; system administration skills (Windows, Linux, VMs).
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills, including the ability to present technical information to non-technical audiences.
• Ability to obtain and maintain a DOE Q security clearance with SCI access.
• Graduate of USG counterintelligence credentialing course.
• Broad knowledge of computer security-related products and industry best practices with specific knowledge of intrusion detection and firewall theory and implementation.
• Working knowledge of the SPLUNK data platform and its search processing language.
• Cyber Security/INFOSEC certifications (SANS, EC-Council, ISACA, ISC2, SPLUNK).
• Bachelor’s degree in Cybersecurity, Computer Science, Computer Engineering, Information Technology, or a related field.

Not applicable

The minimum education and experience for the lowest career level in the job posting range are listed under Minimum Job Requirements. Successful candidates hired into a higher career level than the minimum in the range must meet the requirements listed in the job leveling charts for the career level into which they are being hired. Requires a Q clearance; however all qualified candidates will be considered regardless of their current clearance status.

The ability to obtain and maintain a Department of Energy Q clearance is required. Position may require entry into Materials Access Areas (MAA) and participation in the Human Reliability Program (HRP). If HRP is required, candidate must complete a counterintelligence‑scope polygraph,…