Security Specialist

Job Duties/Scope Of Work

The Insider Threat Program Administrator is responsible for leading the development, implementation, administration, and continuous improvement of the site's Insider Threat Program. This role serves as a central coordinator for insider threat prevention, awareness, reporting, assessment, and mitigation activities across the organization.
The position will work closely with Security, Human Resources, IT, Continuous Improvement, leadership, and DOE stakeholders to establish processes, policies, and communication pathways that strengthen the site's ability to identify and manage insider threat risks.
This role also serves as a central point of coordination for insider threat reviews, program activities, and organizational response efforts, as applicable. In addition, the position will support policy development, training, awareness, metrics, and continuous improvement activities related to insider threat prevention and response.
As an additional responsibility, this position will provide classified cybersecurity support in coordination with technical teams. This may include assisting with secure configuration practices, vulnerability remediation coordination, access control support, system monitoring awareness, and other cybersecurity-related administrative activities that complement the Insider Threat Program.

• Design, implement, and administer a comprehensive Insider Threat Program tailored to site needs
• Develop processes for insider threat identification, reporting, risk assessment, mitigation, and program oversight
• Coordinate insider threat activities across Security, Human Resources, IT, Continuous Improvement, and other relevant organizations
• Serve as a primary liaison for insider threat-related communication and collaboration across departments
• Develop, update, and maintain policies, procedures, and protocols related to insider threat prevention and awareness
• Conduct or coordinate training and awareness activities for employees and leadership on insider threat indicators, reporting expectations, and preventative measures
• Evaluate program effectiveness and recommend improvements to address evolving risks, trends, and regulatory expectations
• Support insider threat-related inquiries, reviews, and response coordination, as applicable
• Maintain documentation, records, metrics, and reporting associated with program activities
• Provide classified cybersecurity support in coordination with system administrators, cybersecurity staff, and system owners
• Assist with secure configuration practices, account management, and access control coordination
• Support vulnerability identification, tracking, and remediation efforts
• Assist with system monitoring, logs, alerts, and security-related follow-up actions
• Support documentation of technical procedures, configurations, and security processes
• Coordinate with cybersecurity teams on audits, assessments, compliance activities, and remediation actions
• Provide support for server administration, patching, and technical solution implementation

• Bachelor's degree in information systems, business, security, or technical field such as security management, business administration, computer science, or cybersecurity; and 6 years of relevant experience; or an equivalent combination of education and experience
• Strong understanding of insider threat dynamics, risk indicators, and mitigation strategies
• Experience developing, implementing, administering, or supporting security-related programs
• Proven experience collaborating with cross-functional teams, especially Security, Human Resources, and Information Management
• Excellent written, verbal, and interpersonal communication skills
• Ability to engage effectively with stakeholders at all organizational levels
• Ability to handle sensitive and classified information with discretion and professionalism
• Experience documenting processes, procedures, and program activities
• Working knowledge of cybersecurity principles, access control, and secure administrative practices
• Ability to obtain and maintain a Personal Identity Verification (PIV) Credential badge.

• Bachelor's degree in Information Management, Security Management, Cybersecurity, or related field
• Experience leading or supporting an Insider Threat Program in a regulated or government environment
• Knowledge of security regulations and compliance standards, such as DOE Orders, NISPOM, and related requirements
• Experience in incident response or investigations related to insider threat concerns
• Familiarity with data loss prevention (DLP) tools and techniques
• IT or cybersecurity experience associated with insider threat detection, analysis, or mitigation
• Experience with vulnerability management, SIEM tools, endpoint protection, or log management solutions
• Experience supporting secure enterprise or classified environments
• Experience with Windows Server, Linux, Active Directory, or related enterprise technologies

• Certified…