Cyber Intelligence Analyst – Critical Infrastructure

OverviewProtecting U.S. residents and visitors is among our nation’s highest priorities. As adversaries gain access to sophisticated technologies and materials, the threats grow more dynamic and complex—from cyber and nuclear to chemical and biological weapons of mass effect and other forms of terrorism. The PNNL national security mission employs our researchers, tools, and technologies to play a key role in advancing the ability to identify and secure nuclear materials, detect weapons of mass effect, manage nonproliferation treaties, secure our nation's borders, and protect critical infrastructures. PNNL’s scientific discovery and capabilities—rooted in innovative theory, methods, algorithms, and tools—are enabling stronger, more resilient technologies and systems to safeguard national security. Coupled with decades of radiological and nuclear materials expertise, advanced computing and threat analysis capabilities, and a broad fundamental science base, we are identifying and countering emerging threats that have significant impact at home and around the globe.Candidates for this position will support work being performed in PNNL’s Emerging Threats and Technologies Division within the National Security Directorate (NSD). The Emerging Threats and Technologies Division’s mission space is comprised of cybersecurity, infrastructure protection, policy and intelligence, and security systems expertise. The organization consists of over 300 scientists, engineers, and analysts with backgrounds in cyber, nuclear, intelligence, policy, data science, and other fields. Our staff work in interdisciplinary project teams to provide innovative concepts that integrate policy, analytics, science, and technology into unique solutions. Our collaborative environment and commitment to work/life balance makes PNNL an ideal place to advance your career, challenge yourself, and make a difference in the world. Within the Emerging Threats and Technologies Division, experts in the Cyber Analytics and Analysis group creates reliable, repeatable, and robust methods for obtaining and maintaining cyber situational awareness. We are looking for an Cyber Security Analyst to join a Multi-Int Threat Analysis team.ResponsibilitiesThis cyber security analyst will use their fundamental knowledge of networking/computing systems and analysis techniques to create cyber-derived threat intelligence to enhance the protection of US Critical Infrastructure networks, personnel, and assets. The accepted candidate will join a dynamic team responsible for producing domain-specific, mission-related analysis and reports for the national security community and program affiliated entities. Typical project tasks can include:• Working with minimal oversight to detect, interpret, investigate, and document network traffic anomalies in accordance with established processes and procedures.• Conducting accurate and timely analysis of large data sets fused with disparate sources of information on various subject matters to producing high quality technical reports for multiple audiences with varying technical acuity.• Maintaining subject matter expertise in area(s) of responsibility by developing threat reporting that is appropriately documented; crafting opinions and judgments in area(s) of responsibility; providing timely support to sponsor requests; and remaining current on relevant intelligence, emerging threats, and geo-political events.• Understanding the technologies and techniques used to analyze relevant datasets, including the ability to quickly learn proprietary tools.• Preparing and delivering briefings for sponsor or other customers.• Analyzing large-scale network traffic data and open-source information to identify threats and vulnerabilities.• Generate reports and assessments to enable cyber response in operational environments.As the analyst advances in their career and role, they are expected to communicate across NSD’s cyber and analytics communities to create and maintain technical expertise and awareness of applicable lab capabilities. They will collaborate with external sponsor organizations and industry to identify opportunities to propose new work and facilitate the adoption of analytics by user communities.This position with Pacific Northwest National Laboratory is for full-time onsite assignment at one of PNNL’s main campuses - Richland preferred and Seattle is acceptable. It requires that a candidate be deemed suitable for a TS/SCI clearance and preference will be given to candidates already holding this clearance under another organization.QualificationsMinimum Qualifications:• BS/BA and 5+ years of relevant work experience -OR-• MS/MA and 3+ years of relevant work experience -OR-• PhD with 1+ year of relevant experiencePreferred Qualifications• Currently active Q//SCI clearance preferred or TS//SCI clearance preferred• Excellent verbal and written communication skills with a demonstrated ability for writing in a clear and understandable manner.• Working Knowledge of cyber security best practices including the implementation of the CIA Triad in software design; knowledge of fundamental workings and security of telecommunication network design, operating systems, software, and/or hardware (IT/OT)• Familiar with common tactics, techniques, and procedures used by cyber threat actors to conduct network reconnaissance and intrusions• Experience leveraging network-based data, such as netflow, passive DNS, IP registration, and other datasets for threat hunting and data analysis• Cyber Threat Intelligence, Malware Analysis, Cyber Defense Roles• Demonstrated knowledge and use of analytical tradecraft (e.g., structured analytic techniques).• Experience writing intelligence or analysis products for a variety of skilled/unskilled audiences• Experience briefing or presenting cyber threats and analysis to large groups of skilled practitioners• Demonstrated understanding of the US intelligence organizations and roles• Demonstrated organizational skills with ability to prioritize work assignments and adjust schedules based on changing requirements.• Expertise with query language and syntax such as SQL and Lucene• Familiarity with network security tools such as Wireshark, Zeek, Snort and SuricataHazardous Working Conditions/EnvironmentOn occasion, domestic and international travel may be required. Hazards associated with international travel safety and security will apply. The incumbent will be expected to work flexible hours to accommodate time zone differences associated with the location of virtual event participants.Additional InformationThis position requires the ability to obtain and maintan both a DOE and Top Secret, Sensitive Compartmented Information (TS/SCI) clearance.Requirements• U.S. Citizenship• Background Investigation: Applicants selected will be subject to a Federal background investigation and must meet eligibility requirements for access to classified matter in accordance with 10 CFR 710, Appendix B.• Drug Testing: All Security Clearance positions are Testing Designated Positions, which means that the candidate selected is subject to pre-employment and random drug testing. In addition, applicants must be able to demonstrate non-use of illegal drugs, including marijuana, for the 12 consecutive months preceding completion of the requisite Questionnaire for National Security Positions (QNSP).Note: Applicants will be considered ineligible for security clearance processing by the U.S. Department of Energy until non-use of illegal drugs, including marijuana, for 12 months can be demonstrated.Testing Designated PositionThis position is a Testing Designated Position (TDP). The candidate selected for this position will be subject to pre-employment and random drug testing for illegal drugs, including marijuana, consistent with the Controlled Substances Act and the PNNL Workplace Substance Abuse Program.About PNNLPacific Northwest National Laboratory (PNNL) is a world-class research institution powered by a highly educated, diverse workforce committed to the values of Integrity, Creativity, Collaboration, Impact, and Courage. Every year, scores of dynamic, driven people come to PNNL to work with renowned researchers on meaningful science, innovations and outcomes for the U.S. Department of Energy and other sponsors; here is your chance to be one of them!At PNNL, you will find an exciting research environment and excellent benefits including health insurance, flexible work schedules and telework options. PNNL is located in eastern Washington State—the dry side of Washington known for its stellar outdoor recreation and affordable cost of living. The Lab’s campus is only a 45-minute flight (or ~3-hour drive) from Seattle or Portland, and is serviced by the convenient PSC airport, connected to 8 major hubs.Commitment to Excellence, Diversity, Equity, Inclusion, and Equal Employment OpportunityOur laboratory is committed to a diverse and inclusive work environment dedicated to solving critical challenges in fundamental sciences, national security, and energy resiliency. We are proud to be an Equal Employment Opportunity and Affirmative Action employer. In support of this commitment, we encourage people of all racial/ethnic identities, women, veterans, and individuals with disabilities to apply for employment.Pacific Northwest National Laboratory considers all applicants for employment without regard to race, religion, color, sex (including pregnancy, sexual orientation, and gender identity), national origin, age, disability, genetic information (including family medical history), protected veteran status, and any other status or characteristic protected by federal, state, and/or local laws.We are committed to providing reasonable accommodations for individuals with disabilities and disabled veterans in our job application procedures and in employment. If you need assistance or an accommodation due to a disability, contact us at careers@pnnl.gov.Drug Free WorkplacePNNL is committed to a drug-free workplace supported by Workplace Substance Abuse Program (WSAP) and complies with federal laws prohibiting the possession and use of illegal drugs.If you are offered employment at PNNL, you must pass a drug test prior to commencing employment. PNNL complies with federal law regarding illegal drug use. Under federal law, marijuana remains an illegal drug. If you test positive for any illegal controlled substance, including marijuana, your offer of employment will be withdrawn.HSPD-12 PIV Credential RequirementIn accordance with Homeland Security Presidential Directive 12 (HSPD-12) and Department of Energy (DOE) Order 473.1A, new employees are required to obtain and maintain a HSPD-12 Personal Identity Verification (PIV) Credential. To obtain this credential, new employees must successfully complete and pass a Federal Tier 1 background check investigation. This investigation includes a declaration of illegal drug activities, including use, supply, possession, or manufacture within the last year. This includes marijuana and cannabis derivatives, which are still considered illegal under federal law, regardless of state laws.Mandatory RequirementsPlease be aware that the Department of Energy (DOE) prohibits DOE employees and contractors from having any affiliation with the foreign government of a country DOE has identified as a “country of risk” without explicit approval by DOE and Battelle. If you are offered a position at PNNL and currently have any affiliation with the government of one of these countries, you will be required to disclose this information and recuse yourself of that affiliation or receive approval from DOE and Battelle prior to your first day of employment.Rockstar RewardsEmployees and their families are offered medical insurance, dental insurance, vision insurance, health savings account, flexible spending accounts, basic life insurance, disability insurance*, employee assistance program, business travel insurance, tuition assistance, supplemental parental bonding leave**, surrogacy and adoption assistance, and fertility support. Employees are automatically enrolled in our company funded pension plan* and may enroll in our 401k savings plan. Employees may accrue up to 120 vacation hours per year and may receive ten paid holidays per year.• Research Associates excluded.• Once eligibility requirements are met.Click Here For Rockstar RewardsNotice to ApplicantsPNNL lists the full pay range for the position in the job posting. Starting pay is calculated from the minimum of the pay range and actual placement in the range is determined based on an individual’s relevant job-related skills, qualifications, and experience. This approach is applicable to all positions, with the exception of positions governed by collective bargaining agreements and certain limited-term positions which have specific pay rules.As part of our commitment to fair compensation practices, we do not ask for or consider current or past salaries in making compensation offers at hire. Instead, our compensation offers are determined by the specific requirements of the position, prevailing market trends, applicable collective bargaining agreements, pay equity for the position type, and individual qualifications and skills relevant to the performance of the position.Minimum SalaryUSD $134,500.00/Yr.Maximum SalaryUSD $219,500.00/Yr.