Overview:
At PNNL, our core capabilities are divided among major departments that we refer to as Directorates within the Lab, focused on a specific area of scientific research or other function, with its own leadership team and dedicated budget.
Our Science & Technology directorates include National Security, Earth and Biological Sciences, Physical and Computational Sciences, and Energy and Environment. In addition, we have an Environmental Molecular Sciences Laboratory, a Department of Energy, Office of Science user facility housed on the PNNL campus.
The National Security Directorate (NSD) drives science-based, mission-focused solutions to take on complex, real-world threats to our nation and the world.
The Emerging Threats and Technologies Division, part of the National Security Directorate, consists of over 400 scientists, engineers, and analysts with backgrounds in cyber, nuclear, intelligence, policy, data science, and other fields. We work in interdisciplinary project teams to provide innovative concepts that integrate policy, analytics, science, and technology into unique solutions.
Rockstar Rewards:

Employees and their families are offered medical insurance, dental insurance, vision insurance, health savings account, flexible spending accounts, basic life insurance, disability insurance, employee assistance program, business travel insurance, tuition assistance, supplemental parental bonding leave, surrogacy and adoption assistance, and fertility support. Employees are automatically enrolled in our company funded pension plan and may enroll in our 401k savings plan. Employees may accrue up to 120 vacation hours per year and may receive ten paid holidays per year.

• Research Associates excluded.

**Once eligibility requirements are met.
Click Here For Rockstar Rewards

Responsibilities:

• Monitors against authorized security control requirements and provides continuous monitoring assessments of the risk represented by system and application configurations or vulnerabilities.
• Leverages data sources to prevent, detect, respond and remediate internal and external attacks or attempts to gain unauthorized access to internal and/or external information, network, or data systems.
• Interprets, analyzes, and executes incident response actions for detected intrusion anomalies and events.
• Ensures all events and anomalies are investigated, documented and reported in accordance with established processes and procedures.
• Conducts system, network, or software vulnerability assessments and penetration testing in accordance with established processes and procedures.
• Manages and operates tools specific and necessary for cyber security operations functions.
• Conducts information risk assessments and supports compliance documentation and system accreditation requirements.
• Interacts with stakeholders and sponsors to ensure technical analyses and generated products are appropriately aligned with mission needs.
• Collaborates with other scientists in innovation efforts that support and further mission requirements.
• Prepares and presents technical and other reports and briefings.
• Performs assessments of open source reporting and situational awareness data feeds to ensure the security of internal and/or external information and technology systems.
• Analyzes cyber threat intelligence from various sources to inform and enable cyber response.
• Evaluates cyber threat indicators and system vulnerabilities and develops assessments, threat profiles and other cyber intelligence products.
• May conduct forensic acquisition and analysis activities in support of cyber intrusion or insider threat investigations.
• May interface with external entities including law enforcement, intelligence and other government organizations and agencies.

Qualifications:

Minimum Qualifications:

• BS/BA and 2 years of relevant experience -OR-
• MS/MA -OR-
• PhD

Preferred Qualifications:

• MS in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, Management Information Systems, or related disciplines and 1+ year of relevant experience
• Knowledge of SBOM formats and structures
• Knowledge of HBOM formats and structures
• Experience with analytics of SBOM or HBOMs, using SQL or Python scripting
• Advanced experience with graph analytics tools, techniques, and procedures, especially with respect to SBOM or HBOM data
• Experience with risk or vulnerability assessments of OT or IoT devices and systems
• Understanding of device or system integrity evaluations
• Basic software design and creation, to include at least one programming language (SQL, R, or Python preferred)
• Basic cybersecurity tools (Wireshark, NMAP, etc)
• Experience writing and presenting peer reviewed conference papers
• Advanced experience with technical writing
• Ability to work as a member of a geographically distributed team
• Attention to detail
• Ability to mentor others
• Ability to speak and present to leadership
• Ability to lead small teams (2-5 staff members)

Hazardous Working Conditions/Environment:
Not Applicable
Testing Designated Position (TDP):
This is not a Testing Designated Position (TDP).
About PNNL:
Pacific Northwest National Laboratory (PNNL) is a world-class research institution powered by a highly educated, diverse workforce committed to the values of Integrity, Creativity, Collaboration, Impact, and Courage. Every year, scores of dynamic, driven people come to PNNL to work with renowned researchers on meaningful science, innovations and outcomes for the U.S. Department of Energy and other sponsors; here is your chance to be one of them!
At PNNL, you will find an exciting research environment and excellent benefits including health insurance, and flexible work schedules. PNNL is located in eastern Washington State—the dry side of Washington known for its stellar outdoor recreation and affordable cost of living. The Lab’s campus is only a 45-minute flight (or ~3 hour drive) from Seattle or Portland, and is serviced by the convenient PSC airport, connected to 8 major hubs.
Commitment to Excellence and Equal Employment Opportunity:
Our laboratory is committed to fostering a work environment where all individuals are treated with fairness and respect while solving critical challenges in fundamental sciences, national security, and energy resiliency. We are an Equal Employment Opportunity employer.
Pacific Northwest National Laboratory considers all applicants for employment without regard to race, religion, color, sex (including pregnancy, sexual orientation, and gender identity), national origin, age, disability, genetic information (including family medical history), protected veteran status, and any other status or characteristic protected by federal, state, and/or local laws.
We are committed to providing reasonable accommodations for individuals with disabilities and disabled veterans in our job application procedures and in employment. If you need assistance or an accommodation due to a disability, contact us at careers@pnnl.gov.
Drug Free Workplace:
PNNL is committed to a drug-free workplace supported by Workplace Substance Abuse Program (WSAP) and complies with federal laws prohibiting the possession and use of illegal drugs.
If you are offered employment at PNNL, you must pass a drug test prior to commencing employment. PNNL complies with federal law regarding illegal drug use. Under federal law, marijuana remains an illegal drug. If you test positive for any illegal controlled substance, including marijuana, your offer of employment will be withdrawn.
HSPD-12 PIV Credential Requirement:
As a national laboratory, PNNL is responsible for adhering to the Homeland Security Presidential Directive 12 (HSPD-12) and Department of Energy (DOE) Order 473.1A, which require new employees to obtain and maintain a HSPD-12 Personal Identify Verification (PIV) Credential. To obtain this credential, new employees must successfully complete the applicable tier of federal background investigation post hire and receive a favorable federal adjudication. The tier of federal background investigation will be determined by job duties and national security or public trust responsibilities associated with the job. All tiers of investigation include a declaration of illegal drug activities, including use, supply, possession, or manufacture within the last 1 to 7 years (depending on the applicable tier of investigation). Illegal drug activities include marijuana and cannabis derivatives, which are still considered illegal under federal law, regardless of state laws.
For foreign national candidates:
If you have not resided in the U.S. for three consecutive years, you are not eligible for the PIV credential and instead will need to obtain a favorable Local Site Specific Only (LSSO) Federal risk determination to maintain employment. Once you meet the three-year residency requirement thereafter, you will be required to obtain a PIV credential to maintain employment. The tier of federal background investigation required to obtain the PIV credential will be determined by job duties at the time you become eligible for the PIV credential

• Monitors against authorized security control requirements and provides continuous monitoring assessments of the risk represented by system and application configurations or vulnerabilities.
• Leverages data sources to prevent, detect, respond and remediate internal and external attacks or attempts to gain unauthorized access to internal and/or external information, network, or data systems.
• Interprets, analyzes, and executes incident response actions for detected intrusion anomalies and events.
• Ensures all events and anomalies are investigated, documented and reported in accordance with established processes and procedures.
• Conducts system, network, or software vulnerability assessments and penetration testing in accordance with established processes and procedures.
• Manages and operates tools specific and necessary for cyber security operations functions.
• Conducts information risk assessments and supports compliance documentation and system accreditation requirements.
• Interacts with stakeholders and sponsors to ensure technical analyses and generated products are appropriately aligned with mission needs.
• Collaborates with other scientists in innovation efforts that support and further mission requirements.
• Prepares and presents technical and other reports and briefings.
• Performs assessments of open source reporting and situational awareness data feeds to ensure the security of internal and/or external information and technology systems.
• Analyzes cyber threat intelligence from various sources to inform and enable cyber response.
• Evaluates cyber threat indicators and system vulnerabilities and develops assessments, threat profiles and other cyber intelligence products.
• May conduct forensic acquisition and analysis activities in support of cyber intrusion or insider threat investigations.
• May interface with external entities including law enforcement, intelligence and other government organizations and agencies