Cybersecurity Researcher

Idaho National Laboratory is hiring a Cybersecurity Researcher to work with our Cyber Operations and Incidence Response team. Our team works a 9x80 schedule located out of our Idaho Falls facility with every other Friday off.

Apply advanced scientific and engineering principles to analyze, design, develop, and assess critical infrastructure systems and networks. Work includes tasks such as implementing security protocols, evaluating firewalls, and creating new methods for countering cyber-attacks. Position involves vulnerability assessment of critical infrastructure environments, contributing to the development of analytical tools for network and host interrogation, and engaging in activities surrounding malware analysis and reverse engineering for critical infrastructure engagements. Proficiency in processors, assembly code, red and blue team strategies, industrial network protocols, big data analysis platforms such as Splunk and Elastic Search, as well as formal logic and algorithmic analysis, is essential for success in this multifaceted role.

Responsibilities Include:

• Analyze and reverse engineer anomalous/malicious software and binaries.
• Research mitigation techniques and latest blue team methods.
• Work with others to provide assistance and technical solutions for defensive posturing.
• Determine and assist others in developing incident response actions and recommending mitigation strategies.
• Organize and participate in the development and maintenance of custom code used to analyze network traffic and proprietary protocols, develop attack and defense methodology and code on high-risk industrial computer networks.
• Develop technical solutions for national security topics intrusion analysis, malware, systems and vulnerabilities, network security, advanced analytic tools, and data visualization techniques.
• Work with peers, threat analysts and senior engineers to identify security issues of existing control systems, platforms, and applications.
• Develop algorithms and methods for detecting and preventing cyber-attacks.
• Develop and maintain code used to find weaknesses in systems to verify and validate patch effectiveness.
• Conduct penetration testing and vulnerability assessments.
• Write scripts and develop software utilities to automate security analysis efforts.
• Work with customers to develop requirements, produce and test code, and provide necessary documentation for products and software being developed.
• Participate in project teams to produce proposals for new work including joint projects with government, academia, and industry.
• Continually build and maintain customer relationships and support customer requests with briefings and papers.
• Author technical papers, reports and proposals for internal and external release as well as represent the organization by giving technical presentations in public forums.
• Participate in both National and International forums for the development of significant new concepts or novel approaches to Critical Infrastructure hunt and incident response, malware reverse engineering and Cyber Security.
• Other duties as assigned.

Minimum Requirements:

• Bachelor of Science degree in any related field in Data/Computer Science or closely related field. May consider experience in lieu of degree commensurate with level.
• EX3: Bachelor's and 5 years of experience. Master's and 2 years of experience. PhD and 2 years of experience.
• EX4: Bachelor's and 9 years of experience. Master's and 6 years of experience. PhD and 4 years of experience.
• Experience in scripting and programming languages, critical system vulnerability mitigation, and network packet level analysis.
• Experience in Red Team operations, adversary emulation, or advanced penetration testing.
• Experience developing and documenting Tactics, Techniques, and Procedures (TTPs) based on MITRE ATT&CK and industry best practices.
• Experience with threat intelligence and ability to incorporate real-world TTPs from APT groups or threat actors into Red Team operations.
• Experience in low level programming languages, critical system vulnerability mitigation, and network packet level analysis.
• Must be a US citizen and have the ability and willingness to obtain and maintain a "Q" clearance with appropriate sigma's and SCI clearance.

Preferred Experience:

• Experience with industrial control system environments
• Experience with software reverse engineering and malware analysis
• Experience developing software tools and exploits for Red Team operations, penetration tests and vulnerability assessments

Job Information:

• The pay range for this position is: Level 3 ($111,888 - $229,284) / Level 4 ($134,124 - $275,136). At Idaho National Laboratory compensation decisions are determined using factors such as education, relevant experience, and other credentials.
• Multi-Level: This is a multi-level posting and you will be placed at the appropriate level dependent on depth and breadth of proven experience and skills.

Physical Requirements

While performing the duties of this classification, the employee is frequently required to stand, walk, sit, stoop, kneel, bend, use hands to handle materials, manipulate tools, keyboard and type, reach with hands and arms, and operate job-related equipment. The employee must occasionally lift and/or move up to 25 pounds. Sufficient visual acuity and hearing capacity to perform the essential functions and interact with people is required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Benefits and Relocation

• Medical, Dental, Vision, and Flexible Spending Accounts
• 401(k) with a 4.2% employer contribution and up to 4.8% match
• Paid time off (personal leave)
• Employee Education Program (tuition assistance)
• Comprehensive Relocation Package
• Benefit eligibility subject multiple factors, including employment status and position classification.

INL is a science-based, applied engineering national laboratory dedicated to supporting the U.S. Department of Energy's mission in nuclear energy research, science, and national defense. With more than 5,000 scientists, researchers, and support staff, the laboratory works with national and international governments, universities and industry partners to discover new science and development technologies that underpin the nation's nuclear and renewable energy, national security, and environmental missions.

INL Mission
Our mission is to discover, demonstrate and secure innovative nuclear energy solutions, other clean energy options and critical infrastructure.

INL Vision
Our vision is to change the world's energy future and secure our nation's critical infrastructure.

Selective Service Requirements
To be eligible for employment at INL males born after December 31, 1959 must have registered with the Selective Service System (SSS). For more information see www.sss.gov.

Equal Employment Opportunity
Idaho National Laboratory (INL) is an Equal Employment Opportunity (EEO) employer. It is the policy of INL to provide equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information.

Reasonable Accommodation
We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Other Information
When applying to positions please provide a resume and answer all questions on the following screens. Applicants, who fail to provide a resume or answer the questions, may be deemed ineligible for consideration.

INL does not accept resumes from third party vendors unsolicited.