Cyber Specialist (Multi-level)

The Cyber Specialist (Associate level to Principal level) conducts network or software vulnerability assessments and penetration testing for the organization, as established by the United States Department of Energy (DOE) orders and policies on Cyber Security. Isolates, blocks or removes threat access. Evaluates system security configurations. Performs data analysis on network and log monitoring information. Supports the design and administers cyberuser awareness programs. Supports the performance of risk assessment on new or modified systems and networks. Provides appropriate documentation to adhere to relevant regulations and achieve organization objectives., Responsibilities at the Associate Cyber Specialist or Cyber Specialist level:

• Performs routine and/or basic assessments of systems and networks within the networking environment or enclave and identifies systems and networks that deviate from acceptable configurations, enclave policy, or local policy.
• Supports the evaluation of cyber security incidents, procedures and capabilities.
• With guidance from more senior specialists, evaluates and exploits system and network vulnerabilities and misconfigurations for purposes of gathering data from target or adversary automated information systems or networks and to enable operations and intelligence collection capabilities.
• Assists with leveraging penetration testing capabilities on computer networks to disrupt, deny, degrade, or destroy information resident in computers and computer networks, or the computers and networks.
• Assists with analysis of data obtained through network security monitoring and log monitoring of systems, evaluates against provided data sources and threat intelligence feeds, and identifies potential issues for further investigation.
• Provides input to the development and maintenance of the Certification and Accreditation package in a DOE cyber security environment; including development of System Security Plans, Security Controls Deviations, Contingency and Disaster Recovery Plan, Configuration Management Plan, and other necessary documents.
• Provides support to the performance and documentation of risk assessments on new equipment, software, applications, and hardware against the current environment.
• Other duties as assigned.

Additional Responsibilities at the Senior I or Principal Cyber Specialist level:

• Will perform as the Information System Security Officer (ISSO)
• Utilizing knowledge of a federally regulated environment and support from lead, develops and evaluates procedures necessary to implement cyber requirements.
• Participates in Contingency Plan, Recovery Plan and Incident Response training and tests for assigned information technology (IT)/ Operational Technology (OT) systems.
• Participates in Incident Response activities for assigned IT/OT systems.
• Serves as support on assigned IT system(s) and brief on all matters, technical and otherwise, involving the cybersecurity posture of the system - including notifications to the system owner, the CIO, and DOE
• Works with technical teams to mitigate security control deficiencies for assigned IT/OT systems.
• Assesses the cybersecurity impact of changes to assigned IT/OT systems.
• Updates hardware and software inventories to reflect changes to assigned IT/OT systems as needed.
• Provides technical cybersecurity expertise on IT/OT operational projects throughout the Software Development Lifecycle
• Other duties as assigned.

• Bachelor’s degree in computer science, information technology or equivalent field and experience working in an information technology field with an emphasis in security, * Individuals not possessing a four-year degree may qualify with related education and/or experience., Preferred Qualifications for a Cyber Specialist:
• Computer Science degree with an emphasis on cyber security
• Experience as either a system or network administrator
• Responsible for maintaining the security profile of systems and/or networks
• Experience using the following types of software: security scanning, patch management, and configuration management
• Experience working in a regulated environment
• Experience in application penetration testing
• Experience using Nessus and Shavlik
• Contributed to the development and maintenance of an Accreditation Package in a DOE environment
• Knowledgeable on FIPS and NIST guidelines.

Additional Preferred Qualifications for a Senior I or Principal Cyber Specialist:

• Experience working in a DOE or federally regulated environment

• Knowledgeable on FIPS 199, NIST 800-53, NIST 800-53a, NIST 800-70, NIST 800-37 (and other NIST guidance documentation)
• International Information System Security Certification Consortium certification (ISC)2, Certified Information Security System Professional (CISSP)
• Knowledgeable on DOE Ord. 205.1a/b, Savannah River Mission Completion offers a competitive and comprehensive benefits package with flexibility to meet your needs.

Highlights of our plans include:

• 401k Retirement Savings Plan - 5% immediate company contribution, additional matching for employee contributions
• Health Insurance & Prescription Drug Program
• Health Savings Account
• Telehealth with BlueCare on Demand
• Dental Coverage
• Vision Coverage
• Flexible Spending Accounts
• Includes 160 hours annual paid time off (accrued monthly), plus 11 paid holidays
• Paid Parental Leave
• Life and Accident Coverage
• Disability Coverage
• Employee Assistance Program
• Tuition Reimbursement

Minimum Pay

USD $56,000.00/Yr.

Maximum Pay

USD $188,000.00/Yr.

Savannah River Mission Completion (SRMC), a prime contractor for the US Department of Energy, is responsible for managing the Department of Energy’s Savannah River Site’s Liquid Waste operations contract. Located in Aiken, South Carolina, SRMC is a limited liability company formed by nuclear operations and environmental remediation global leaders BWXT, Amentum, and Fluor. The SRMC Team is responsible for the closure of waste tanks, the operation of the Savannah River Site’s Defense Waste Processing Facility, tank farm operations and associated production and disposal facilities. www.savannahrivermissioncompletion.com