Associate Cyber Analyst (Hybrid Eligible)

Requisition Id 15710 

 

Overview:

We are hiring a Cyber Analyst to perform defensive cyber operational tasks, track remediation of ORNL system vulnerabilities and respond to reported incidents! The ideal candidate will be an experienced analyst with a strong background in addressing network vulnerabilities and conducting incident response This position resides in the Defensive Cyber Operations (DCO) Group in the Cyber Security Division of the Information Technology Services Directorate at Oak Ridge National Laboratory (ORNL).

 

Major Duties/Responsibilities:

Specific responsibilities include, but are not limited to:

• Serve as an analyst assisting in and remediating daily Defensive Cyber Operations events.
• Coordinate routine response activities with other junior staff.
• Participate in incident response activities involving multiple teams and functions.
• Develop new dashboards and watchers in an Elastic SIEM environment and automate routine tasking with a Tines SOAR tool.
• Monitor traffic flows in a highly complex, multi-enclave environment to detect and investigate abnormal activity.
• Maintain strong collaborative and data sharing relationships with DOE headquarters Cyber units, other DOE laboratories, and external entities.
• Process and direct vulnerability scanning activities across multiple enclaves in keeping with their specific requirements.
• Maintain strong communications relationships with ORNL’s various IT functions to feed them essential vulnerability data as needed.
• Work with the Emerging Threat team to capture intelligence on threat actor tactics, techniques, and procedures (TTPs) and leverage automated and manual countermeasures in response.
• Assist users with the creation, monitoring, and evaluation of policy and device exceptions.
• Assist in training and awareness activities to ensure ORNL staff are aware of Cyber Security responsibilities and requirements.
• Triage malware and anomalous activity alerts generated by an EDR system.
• Support threat hunting activities by performing hypothesis-driven hunting and remediation activities.
• Deliver ORNL’s mission by aligning behaviors, priorities, and interactions with our core values of Impact, Integrity, Teamwork, Safety, and Service. Promote equal opportunity by fostering a respectful workplace – in how we treat one another, work together, and measure success.

 

Basic Qualifications:

• A BS degree in computer science, computer engineering, information technology, information systems, science, engineering, business, or a related discipline and two (2) to four (4) years of aligned professional experience is required for consideration.
• Two (2) or more years of relevant vulnerability remediation experience.

 

Preferred Qualifications:

• CISSP, GCIH, or equivalent credential.
• Solid understanding of security architecture, policies, and security capabilities of major operating systems.
• Demonstrated experience identifying and resolving technical issues in a project team environment, while remaining flexible and meeting the needs of the business.
• Extensive Tenable experience.
• Familiarity with DOE environment and certification and accreditation processes.
• Excellent interpersonal skills; must interface well with all management levels, system owners, administrative personnel, highly technical cyber security analysts, and general staff.
• Excellent professional communication skills.

 

Special Requirements:

• This position requires the ability to obtain and maintain a clearance from the Department of Energy. As such, this position is a Workplace Substance Abuse (WSAP) testing designated position. WSAP positions require passing a pre-placement drug test and participation in an ongoing random drug testing program.
• Visa sponsorship is not available for this position.

 

Hybrid Eliigibility:

This position is in Oak Ridge, Tennessee and requires onsite presence. We offer a flexible work environment that supports both the organization and our employees. A hybrid/onsite working arrangement may be available with this position, which provides flexibi