Cyber Security Analyst

At PNNL, our core capabilities are divided among major departments that we refer to as Directorates within the Lab, focused on a specific area of scientific research or other function, with its own leadership team and dedicated budget.

Our Science & Technology directorates include National Security, Earth and Biological Sciences, Physical and Computational Sciences, and Energy and Environment. In addition, we have an Environmental Molecular Sciences Laboratory, a Department of Energy, Office of Science user facility housed on the PNNL campus.

The Energy and Environment Directorate delivers science and technology solutions for the nation’s biggest energy and environmental challenges. Our more than 1,700 staff support the Department of Energy (DOE), delivering on key DOE mission areas including: modernizing our nation’s power grid to maintain a reliable, affordable, secure, and resilient electricity delivery infrastructure; research, development, validation, and effective utilization of renewable energy and efficiency technologies that improve the affordability, reliability, resiliency, and security of the American energy system;

and resolving complex issues in nuclear science, energy, and environmental management.

The Energy and Environment Directorate delivers science and technology solutions for the nation’s biggest energy and environmental challenges. Our more than 1,700 staff support the Department of Energy (DOE), delivering on key DOE mission areas including: modernizing our nation’s power grid to maintain a reliable, affordable, secure, and resilient electricity delivery infrastructure; research, development, validation, and effective utilization of renewable energy and efficiency technologies that improve the affordability, reliability, resiliency, and security of the American energy system;

and resolving complex issues in nuclear science, energy, and environmental management.

• Perform independent security and privacy control assessments in support of Security Authorization (SA).
• Conduct assessments of existing and new FISMA systems, including subsystems in the respective system boundary, and communicate the results and potential implications of identified control weaknesses.
• Develop and execute on detailed Security Assessment Plans including the development of assessment methods appropriate to the desired level of assurance.
• Collect assessment evidence, working with various stakeholders as necessary and performing interviews of information system staff and users.
• Draft comprehensive Security Assessment Reports detailing assessment findings, providing an accurate technical evaluation of the system's security posture, clearly describing any identified deviations and/or weaknesses and potential impacts and/or risks, and recommending corrective actions as appropriate.
• Document and provide findings and recommendations that are concise, system-specific, and actionable.

This is an onsite position in Richland, Washington with an expectation of 3-4 days onsite a week.

• BS/BA and 5+ years of relevant cybersecurity policy experience
  -OR-
• MS/MA and 3+ years of relevant cybersecurity policy experience
  -OR-
• PhD with 1+ year of relevant cybersecurity policy experience

• Experience in planning assessments and being a senior member in a team of security control assessors.
• Experience in presenting control requirements and deficiencies to both technical and non-technical audiences.
• Experience performing detailed, full-scope technical security control testing in complex environments.
• Ability to analyze information system configurations and technical specifications against NIST SP 800-53 and other frameworks.
• Experience with development and…