Job Description
Job Description
East Tennessee company is seeking a Cyber Security Vulnerability Analyst to perform defensive cyber operational tasks, respond to reported incidents, and track remediation of client system vulnerabilities to include industrial control systems.
The ideal candidate will be an experienced analyst with a strong background in addressing network vulnerabilities and conducting incident response activities.
This is a full-time, hybrid position that will work onsite in Oak Ridge, TN 2-3 days each week.
Job Responsibilities :
- Join the Defensive Cyber Operations Group’s multi-disciplinary team in responding to advanced Cyber threats from targeted phishing to network-based threats, ransomware, and APT-level activity in a Tier 2 role.
- Mentor the DCO’s junior staff, developing their technical and incident resolution skills.
- Participate in incident response activities involving multiple teams and functions.
- Serve as primary coordinator for ORNL response to federal Binding Operational Directives and data calls.
- Leverage internal and external vulnerability scanning scan data to maintain a comprehensive view of ORNL’s threat profile and risk status.
- Automate key DCO functions using Tines technology
- Partner with Emerging Threat team to remediate extant vulnerabilities identified by their intelligence activities.
- Maintain strong collaborative and data sharing relationships with DOE headquarters Cyber units, other DOE laboratories, and external entities.
- Leverage EDR, SIEM, IDS, and PCAP tools to identify and investigate cyber threats.
- Assist users with the creation, monitoring, and evaluation of policy and device exceptions.
- Assist in training and awareness activities to ensure ORNL staff are aware of Cyber Security responsibilities and requirements.
- Partner with Cyber Industrial Control System Engineers to monitor the lab’s ICS enclaves for operational and security issues
Candidates must be able to obtain a federal security clearance so US citizenship is required.
30+ days ago