NOTE: Substance Abuse Program Plan position and subject to random drug/alcohol testing.

Position Overview:

• Under general supervision responsible for providing guidance and support to the Information Technology support personnel and ensuring security controls are implemented in compliance with established policies, plans, procedures and the National Institute of Standards and Technology (NIST). The specific work assignment may include duties or activities of support in one or more of the following functional areas, in addition to other duties as assigned:

Functional:

• Assists with monitoring implementation of security controls established by applicable contract requirements, U.S. Department of Energy (DOE) directives, NIST guidance, system security plans (SSPs) and supporting policies, plans and procedures
• Aids in the preparation, review and update to cyber security polices, plans and procedures
• Identifies unique threats to information systems or applications and recommends mitigating actions
• Promotes the maintenance of an inventory of hardware and software associated with the boundary
• Helps with cyber security assessments to ensure that the cyber security features and controls are functioning and procedures are being implemented effectively and in compliance with DOE directives and NIST guidelines
• Supports vulnerability scanning using tools to identify cyber security threats, risks and vulnerabilities
• Participates in the incident response, investigation, analysis and reporting, and recommends corrective actions
• Assists with assessments and audits information systems and security controls
• Operates and maintains security appliances such as SPLUNK, Tennable Nessus, CISCO Ironport Web Content filters and Data Loss Prevent filters, SNORT, device control applications, and IDS system
• Promotes the maintenance of an inventory of all software that has been approved under the software quality assurance program (SQAP)
• Serves as an advisor on all matters, technical or otherwise, involving the security of an information system, with frequent inter-organizational and external customer contacts

Minimum Requirements:

• Bachelor's of Science Degree in information technology field or equivalent
• 2 years of related experience, or an equivalent combination of education and experience is required
• Ability to obtain and maintain a Homeland Security Presidential Directive (HSPD-12) credential