Cybersecurity Penetration Tester

Idaho National Laboratory needs Cybersecurity Penetration Tester to protect cutting‑edge nuclear and critical infrastructure systems by identifying specific vulnerabilities and recommending expeditious remediation. You'll correlate incident data to pinpoint weaknesses, develop reverse engineering tools to detect vulnerabilities, recommend cost‑effective security controls to mitigate risk, and analyze organizational cyber defense policies for compliance. Your responsibilities include conducting or supporting authorized penetration testing on enterprise network assets, maintaining deployable cyber defense audit toolkits, preparing audit reports with technical and procedural findings and recommended remediation strategies, conducting technical and non‑technical risk and vulnerability assessments of technology environments, and implementing Risk Management Framework and Security Assessment and Authorization requirements for cyber defense systems.

Your expertise will protect the infrastructure supporting naval propulsion systems, electric grid modernization, and breakthrough research that secures the nation's energy independence and technological advancement.

• Correlate incident data to identify specific vulnerabilities and recommend expeditious remediation.
• Develop reverse engineering tools to detect vulnerabilities.
• Recommend cost‑effective security controls to mitigate risk.
• Analyze and evaluate organizational cyber defense policies for compliance.
• Conduct or support authorized penetration testing on enterprise network assets.
• Maintain deployable cyber defense audit toolkit.
• Prepare audit reports with technical and procedural findings and recommended remediation strategies.
• Conduct technical and nontechnical risk and vulnerability assessments.
• Proactively identify, exploit and help remediate security vulnerabilities across our infrastructure, applications and cloud environments.
• In addition to independent offensive operations, you will work closely with our defensive teams in Purple team exercises to stress our detection and response capabilities.

• Level 3:
  Bachelor’s degree in a related technical field such as computer science or computer engineering and 5 years of relevant experience; or a Master’s degree in a related technical field such as computer science or computer engineering and 2 years of relevant experience; or in lieu of a degree, 11 years of relevant experience.
• Level 4:
  Bachelor’s degree in a related technical field such as computer science or computer engineering and 9 years of relevant experience; or a Master’s degree in a related technical field such as computer science or computer engineering and 6 years of relevant experience; or in lieu of a degree, 15 years of relevant experience.
• Must be a US Citizen and able to obtain and maintain a DOE “L” clearance.

• CISSP certification.
• Experience with IDS/SCADA/PIT Systems, Security+, and Splunk.
• Direct technical experience in Enhanced Security Environments.

While performing the duties of this classification, the employee is frequently required to stand, walk, sit, stoop, kneel, bend, and work in an office and laboratory environment. The job requires hand/finger dexterity to keyboard or type, handle materials, manipulate tools, and reach with hands and arms. The job requires operation of job‑related equipment and driving a vehicle. The employee must occasionally lift and/or move up to 30 pounds without assistance.

Sufficient visual acuity and hearing capacity to perform the essential functions and interact with the public is required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Idaho National Laboratory is hiring a Cybersecurity Pen Tester to work on our Architecture, Engineering, and Operations team. Our team works a 9x80 schedule located out of our REC facility with every other Friday off.

• The pay range for this position is:
  Level 3 ($79,344 - $162,732) / Level 4 ($95,256 - $195,288). At Idaho National Laboratory compensation decisions are determined using factors such as education, relevant experience, and other credentials.
• Multi‑Level: This is a multi‑level posting and you will be placed at the appropriate level dependent on depth and breadth of proven experience and skills.
• TDP:
  This is a testing designated position; you will be required to submit to a pre‑employment drug screen and periodic drug testing throughout the term of your employment.