Cyber Security Vulnerability Analyst

Itr Co. Ltd - Oak Ridge, TN

Full-time

Oak Ridge, TN

Food Services and Drinking Places

About the position

The Cyber Security Vulnerability Analyst will be responsible for performing defensive cyber operational tasks, responding to incidents, and tracking the remediation of vulnerabilities in client systems, including industrial control systems. This full-time, hybrid role requires the analyst to work onsite in Oak Ridge, TN, 2-3 days a week, and involves collaboration with various teams to address advanced cyber threats and enhance the security posture of the organization.

Responsibilities

• Join the Defensive Cyber Operations Group's multi-disciplinary team in responding to advanced Cyber threats.
• Mentor junior staff in developing their technical and incident resolution skills.
• Participate in incident response activities involving multiple teams and functions.
• Serve as primary coordinator for ORNL response to federal Binding Operational Directives and data calls.
• Leverage internal and external vulnerability scanning data to maintain a comprehensive view of ORNL's threat profile and risk status.
• Automate key DCO functions using Tines technology.
• Partner with Emerging Threat team to remediate extant vulnerabilities identified by their intelligence activities.
• Maintain strong collaborative and data sharing relationships with DOE headquarters Cyber units and other DOE laboratories.
• Leverage EDR, SIEM, IDS, and PCAP tools to identify and investigate cyber threats.
• Assist users with the creation, monitoring, and evaluation of policy and device exceptions.
• Assist in training and awareness activities to ensure ORNL staff are aware of Cyber Security responsibilities and requirements.
• Partner with Cyber Industrial Control System Engineers to monitor the lab's ICS enclaves for operational and security issues.

Requirements

• Strong background in addressing network vulnerabilities.
• Experience in conducting incident response activities.
• Ability to obtain a federal security clearance (US citizenship required).