at Argonne National Laboratory in Lemont, Illinois, United States
Job Description
Argonne National Laboratory has an opportunity for a Cyber Security Engineer within the Cyber Security Program Office (CSPO). The CSPO is a team responsible for identifying, detecting, protecting, responding, and recovering from cyber security incidents and risks at Argonne National Laboratory. We are looking for an individual to help ensure the security requirements necessary to protect our organization are communicated, implemented, and effective. This role will work with many business groups across the Laboratory to identify security flaws and gaps in system or control design and recommend remediation or mitigations. This individual will also provide ownership and maturation of various security tools operated by the cyber security team.
Key Responsibilities:
+ Provide development, maturation, and ownership of designated security tools, platforms, or capabilities
+ Assess the effectiveness of cyber security measures utilized by systems
+ Provide guidelines for implementing secure systems
+ Develop specific cyber security plans, countermeasures, and risk mitigation strategies for vulnerabilities, systems and/or applications and recommend security changes to system or system components as needed
+ Assess threats to and vulnerabilities of computer systems to develop a security risk profile
+ Determine the protection needs (i.e., security controls) for the information system(s) and network(s) and document appropriately.
+ Evaluate security architectures and designs to determine the adequacy of security design and architecture in response to requirements
+ Provide input on security requirements to be included in statements of work and other appropriate documents
+ Perform security architectural reviews and assist with incorporating security features into products and platforms.
+ Perform industry research on new security protocols, methodologies, and evangelize security at all levels of the organization.
+ Perform other duties as may be assigned.
Position Requirements
To perform the essential functions of this position successful applicants must provide proof of U.S. citizenship, which is required to comply with federal regulations and contract and must be able to obtain and maintain a DOE Q or L clearance.
+ Knowledge of modern security engineering concepts and security-by-design principles including cyber security and privacy principles, cyber threats and vulnerabilities, cyber security architecture, practices, tools, and techniques, and specific operational impacts of cyber security lapses
+ Knowledge of networking concepts and OS administration
+ Knowledge of system administration, network, and operating system hardening techniques
+ Skill in collecting and correlating data from a variety of resources
+ Skill in conducting vulnerability scans and recognizing vulnerabilities in systems
+ Skill in designing countermeasures to identified security risks
+ Skill in translating operational requirements into protection needs (i.e., security controls)
+ Skill in evaluating the adequacy of security designs and how a system should work in various conditions or environments
+ Experience assessing security controls based on cyber security principles and tenets (e.g. CIS CSC, NIST CSF, NIST SP 800-53, NIST 800-171, CMMC)
+ Experience building zero-trust architecture (ZTA).
+ Experience with red team/penetration-test processes and blue team defensive applications.
+ Experience collaborating with various teams
+ Ability to skillfully communicate with various methods and audiences
+ Ability to work well with others and facilitate conversation amongst a small group of professionals
+ ?Ability to model Argonne’s Core Values: Impact, Safety, Respect, Integrity, and Teamwork
Any combination of the following knowledge, skills and experience is preferred:
+ Supporting security for scientific, research, or academic institutions
+ Real-world experience in a major cloud environment (e.g., AWS or Microsoft Azure)
+ Project management experience
+ Knowledge of Agile project-management best practices
+ Knowledge of the NIST Cyber Security Framework
+ Experience withorganizational cyber security tools and capabilities (e.g.,Axonius, Splunk, Tenable.sc, CrowdStrike, etc.)
+ Certifications: A+, Network+, Security+, CySA+ and/or specific industry certifications (e.g., AWS, Cisco, Azure, etc.)
Job Family
Professional Technical (PT)
Job Profile
Computing Security 3
Worker Type
Regular
Time Type
Full time
As an equal employment opportunity and affirmative action employer, and in accordance with our core values of impact, safety, respect, integrity and teamwork, Argonne National Laboratory is committed to a diverse and inclusive workplace that fosters collaborative scientific discovery and innovation. In support of this commitment, Argonne encourages minorities, women, veterans and individuals with disabilities to apply for employment. Argonne considers all qualified applicants for employment without regard to age, ancestry, citizenship status, color, disability, gender, gender identity, gender expression, genetic information, marital status, national origin, pregnancy, race, religion, sexual orientation, veteran status or any other characteristic protected by law.
Argonne employees, and certain guest researchers and contractors, are subject to particular restrictions related to participation in Foreign Government Sponsored or Affiliated Activities, as defined and detailed in United States Department of Energy Order 486.1A. You will be asked to disclose any such participation in the application phase for review by Argonne’s Legal Department.
All Argonne offers of employment are contingent upon a background check that includes an assessment of criminal conviction history conducted on an individualized and case-by-case basis. Please be advised that Argonne positions require upon hire (or may require in the future) for the individual be to obtain a government access authorization that involves additional background check requirements. Failure to obtain or maintain such government access authorization could result in the withdrawal of a job offer or future termination of employment.
To view full details and how to apply, please login or create a Job Seeker account