Job Description

Overview The Security Analyst position assists with administering the Safeguards and Security Programs. Responsibilities Implements safeguards and security program operations. Provides oversight of construction and vendor activities to ensure continuous compliance with security plans and procedures. Assists in the development of site security plans, protocols, procedures, and program files for parent contractors in accordance with NRC and DOE regulatory requirements. Assists in self-assessments as required or requested. Performs Personnel Security, Physical Security, Information Security, and Operations Security functions. Interacts on a regular basis with all levels of DOE, NRC, and other contractor management. Assists with or performs Incidents of Security Concern. Provides Technical Surveillance Countermeasures support. Demonstrates a personal commitment to safety and quality. Performs Derivative Classification support. Administers and maintains computer systems, primarily focusing on Windows and Linux (Ubuntu OS) environments. Configures, troubleshoots, and maintains security systems, including microwave sensors, fiber optics, and camera systems. Maintains, updates, and implements the Security Key and GSA-approved lock management program. Diagnoses and resolves system hardware, software, and network issues. Performs minor electrical repairs and ensures the proper functioning of system components. Collaborates with team members to implement and maintain secure network environments. Articulates technical issues and solutions clearly to non-technical customers. Monitors system performance and security to ensure optimal operations. Documents system configurations, updates, and repair processes. Stays updated on emerging technologies, standards, and best practices in system administration and security systems. Ensures the ECN and associated systems comply with all applicable federal regulations, DOE/NNSA cybersecurity directives, standards, and guidance. Maintains comprehensive knowledge of the Risk Management Framework (RMF) and oversees its application throughout the system lifecycle. Reviews and ensures compliance of the System Security Plans (SSPs), ensuring they remain current and accurately reflect the system architecture, components, and security controls. Identifies, implements, and documents security controls required by DOE/NNSA policies and guidance, as well as other applicable frameworks (e.g., NIST SP 800 series). Collaborates with system administrators and engineers to integrate and validate security controls into network infrastructure and endpoint configurations. Participates in and supports security control assessments, audits, and inspections, ensuring timely remediation of identified weaknesses and deficiencies. Establishes and maintains a continuous monitoring strategy to track security events, system health, and compliance status across the ECN. Conducts regular vulnerability scans, security testing, and risk assessments to proactively identify, prioritize, and mitigate security risks. Manages and maintains Plans of Action and Milestones (POA&Ms), ensuring timely remediation efforts and updating customers on progress. Serves as the primary point of contact for cybersecurity incidents affecting the ECN, coordinating with incident response teams, system owners, and other stakeholders. Investigates security events and alerts, leads root cause analysis, and recommends corrective actions to prevent recurrence. Maintains incident response procedures, ensuring readiness and effective handling of security incidents. Prepares and delivers regular security status reports, metrics, and briefings to NNSA leadership, system owners, and other stakeholders. Documents all security-related actions, decisions, and justifications, ensuring traceability and adherence to record-keeping standards. Maintains all authorization and accreditation documentation to support system authority to operate (ATO) and reaccreditation processes. Collaborates with program managers, system integrators, network engineers, and support staff to ensure security requirements are met without impeding operational effectiveness. Provides guidance, training, and mentorship to team members and stakeholders on security best practices, policies, and procedures. Coordinates with external partners, auditing entities, and government agencies as necessary to address compliance and security considerations. SAFETY RESPONSIBILITIES: Keep work area in order and free of hazards. Perform work within the controls identified and stop work when an unsafe work condition exists. Participate in safety programs and initiatives. Report all injuries. Participate in work planning so that hazards are identified and appropriate corrective actions are taken. Qualifications To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Experience, Competencies, and Education: Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field. Prior experience working as an ISSO or similar cybersecurity role within a federal agency environment desirable. In-depth knowledge of federal cybersecurity policies, guidelines, and the NIST Risk Management Framework (RMF) desirable. Familiarity with DOE/NNSA cybersecurity policies, directives, and standards highly desirable. Professional certifications such as CISSP, CISM, or Security+ are preferred. Strong experience and knowledge in networking (Network +, or CCNA are preferred). Strong analytical, communication, and organizational skills. Ability to obtain and maintain a DOE security clearance. Will be required to take training courses in Locksmithing and GSA-approved Container Technician/Inspector. Language Skills: Ability to read and interpret documents such as procedure manuals. Ability to write routine and non-routine reports and correspondence. Ability to speak effectively before groups of customers or employees. Reasoning Ability: Ability to define problems, collect data, establish facts, and draw valid conclusions. Ability to interpret a variety of instructions and deal with abstract and concrete variables. Other Skills/Abilities: Ability to operate office copier, telephone, fax, and computer are required. Must be able to obtain and maintain a DOE “Q” Clearance. Requires occasional travel to Idaho Falls, Idaho. #J-18808-Ljbffr VNS Federal Services

Job Tags

Similar Jobs