Critical Infrastructure Security Analyst

Idaho National Laboratory is hiring a Critical Infrastructure Security Analyst to work in our Controls department within the Cybercore Integration Center (CIC). Our team works a 9x80 schedule located at INL’s Research and Education Campus (REC) in Idaho Falls, ID with every other Friday off. You will report to the Senior Manager of Controls. 

You will develop and deliver cybersecurity training for Industrial Control Systems (ICS) to external audiences, both on-site and off-site, and serve as a technical subject matter expert (SME) on ICS cybersecurity for the CIC. Using past experiences, education, skills, and subject matter expertise, you must be able to provide technical direction, foster new concept development, and provide technical interface with customers. You will recommend and implement advanced instructional methods, including in-person instructor led, virtual learning, and dynamic simulation-based environments. Finally, you will propose and develop training based on realistic ICS threat scenarios, data analysis, communications, and complex network management systems.  

Essential Job Functions and Responsibilities:

• Provide technical instruction and expertise in ICS cybersecurity threat detection, prevention, and management. 
• Gather information and complete analysis of cyber threats to the United States and its critical infrastructure and technology-controlled processes. Perform as a cybersecurity and ICS subject matter expert. 
• Work on complex issues in cybersecurity, determine methods and procedures on assignments and coordinate activities of other personnel. 
• Interface with ICS and critical infrastructure protection community to meet program requirements. Interfaces with customers to meet project requirements.  
• Represent organization as prime contact on projects and work. 
• Represent the program as an instructor in on-site and off-site cybersecurity training activities. 
• Provide leadership and mentoring to assigned members of small agile teams within the department. 
• Create reports and provide briefings related to these issues.

Required:  

• Level 3: Bachelor’s degree in Engineering, Information Technology, Computer Science, Control Systems, or closely related field and 5 years of relevant working experience, or an advanced degree in the same fields and 2 years of relevant working experience.
• Level 4: Bachelor’s degree in Engineering, Information Technology, Computer Science, Control Systems, or closely related field and 9 years of relevant working experience, a Master’s degree in the same fields and 6 years of relevant working experience, or a PhD in the same fields and 4 years of relevant working experience. 
• Ability obtain and maintain a DOE Q-clearance with appropriate sigmas and SCI clearance with ability and willingness to complete polygraph and become a full-time member of the Field Intelligence Element, which requires U.S. Citizenship
   

The ideal candidate will possess:

• Possess an advanced degree in Engineering from an ABET accredited institution.
• Possess strong public speaking and presentation skills, with experience instructing technical subjects to professional audiences. 
• Demonstrate experience developing cybersecurity courses, labs, and curriculum, including hands-on or simulation-based exercises. 
• Serve as an instructor in on-site and off-site ICS cybersecurity training activities, providing technical instruction in ICS asset and threat identification, protection, attack detection, and response management. 
• Maintain knowledge of ICS and critical infrastructure security related events, threats, and developments, and apply that knowledge to course content and to the identification and development of new divisional capabilities and products. 
• Possess hands-on experience with Industrial Control Systems/SCADA/Process Control system design and experimentation, including control system protocols, process control software, data communications, network security, wireless instrumentation security, graphical user interfaces, experimental setup and testing, sensors, and modeling and simulation. 
• Demonstrate experience in Blue or Purple Team operations in either IT or OT environments. 
• Exhibit experience operating or maintaining a control systems laboratory, test bed, or cyber range environment. 
• Demonstrate creativity in developing new training approaches, methodologies, and demonstration capabilities. 
• Ability to assist management in defining strategic direction in assigned areas. Create and implement new methodologies and architectures that advance the mission of the CIC in the cyber and physical security arenas.

Physical Requirements:

While performing the duties of this classification, the employee is frequently required to stand, walk, sit, stoop, kneel, bend, and work in an office environment. The job requires hand/finger dexterity to keyboard or type, handle materials, manipulate tools, and reach with hands and arms. The job requires the operation of office equipment. The employee must occasionally lift and/or move up to 35 pounds. Sufficient visual acuity and hearing capacity to perform the essential functions and interact with people is required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

 

Job Information:

• The pay range for this position is: Level 3 ($95,256 - $195,288 ) / Level 4 ($114,360 - $234,336). At Idaho National Laboratory compensation decisions are determined using factors such as education, relevant experience, and other credentials.
• Multi-Level: This is a multi-level posting and you will be placed at the appropriate level dependent on depth and breadth of proven experience and skills.
• TDP: This is a testing designated position; you will be required to submit to a pre-employment drug screen and periodic drug testing throughout the term of your employment.
• This position requires up to 20% domestic travel to deliver off-site training.