End Date
12/31/2009
Purpose
The Cyber Security Group in the Computing and Computational Sciences Directorate at the Oak Ridge National Laboratory is seeking qualified applicants for the position of Entry Level Cyber Security Analyst.
Major Duties/Responsibilities
Working both independently and as part of a team, this individual will provide technical assistance as needed to the Cyber Security Group in the Office of the CIO, to ensure computing resources are appropriately protected and to ensure compliance with cyber security policy. We are looking for a highly technical motivated individual with a solid understanding of all aspects of cyber security.
The individual will work as a member of a team to perform cutting-edge cyber intrusion analysis, forensics, and prevention. The individual will ensure comprehensive security techniques are implemented which address all hosts, systems, applications, and networking devices with actions that maximize user convenience and productivity, while at the same time allow rapid intrusion detection and limit security violations. Specifically, the individual should have interest in vulnerability scanning, log file analysis, host security, encryption, and cyber forensics, in addition to firewall management (including assessing firewall rules and rule management, and access management).
Qualifications Required
- Perform vulnerability scanning, provide interpretation of vulnerability scan results, and implement security quarantine procedures.
- Writing programs to automate and stream line tasks.
- Detection of anomalous behavior, conditions to indicate high-interest behavior, and behavior correlated with current or past attack vectors.
- Working with other cyber security technical and policy staff to bring attention to identified anomalies, determine if the anomaly is, in fact, an intrusion/incident, and working with other cyber staff to contact users.
- Assistance in responding to and documenting security incidents, and other pertinent cyber security related tasks as determined by the Cyber Security Technical Lead may also be required.
- On-site work at ORNL, participation in team meetings, and interfacing with other groups at ORNL to determine input and content for procedures and assigned documents.
- Manage ORNL border access control lists and firewalls both manually and through maintenance and development of automated mechanisms.
- Work with the Cyber Security Team to ensure implementation of the comprehensive cyber security program
- Manage intrusion detection/prevention systems and maintain continuous monitoring systems as well as network traffic analysis.
- Create innovative network security recommendations to maintain a high level of productivity.
- Explore and support research efforts on emerging and automated forensic technologies with regard to Cyber Security.
- Maintain and manage web proxy server.
- Assist with phishing exercises.
- Perform war-driving and war-dialing to help locate rogue modems/wireless access points on the ORNL network.
- Maintain ORNL system security log infrastructure and monitor, analyze, and respond to log anomalies.
- Standardize, document, maintain, and automate where possible periodic cyber technical processes for monitoring, analysis, and response to intrusion detection.
- Assist with cyber security training programs for end users.
EDUCATION, EXPERIENCE, AND SKILLS REQUIRED:
BS or MS in Engineering, Computer Science, or a related field is required. College curriculum must include computer programming, computer design, cyber security, and networking concepts and operation. Strong computer programming skills are required. Must have a sound understanding of network security, incident response, cryptography, intrusion detection, forensics, vulnerability assessments, and/or analytic tools. Previous internship, co-op, or thesis work in computer system security, network security or forensics strongly desired.
Special Requirements:
It is required of this position the ability to obtain and maintain a Q Clearance from the Department of Energy. As such, this position is a Workplace Substance Abuse Program (WSAP) testing designed position which requires passing a pre-placement drug test and participation in an ongoing random drug testing program in which employees are subject to being randomly selected for testing. The occupant of this position will also be subject to an ongoing requirement to report to ORNL any drug-related arrest or conviction or receipt of a positive drug test result.
Desirable skills include:
- Knowledge of multiple operating systems such as Solaris, Linux, Windows, and Mac OS X.
- Perl, PHP, C, C++, UNIX/Linux Shell scripts, and/or Java programming language experience.
- Experience using Syslog, Firewall logs, virus logs, netflows, Bro reports, Snort logs, RealSecure events, and other types of log files.
- Network knowledge as both an administrator and analyst at the packet level (TCP/IP, routing, DNS, firewall design and administration).
- A highly motivated individual who strives for excellence and will drive success regardless of obstacles.
- Must be able to work independently, as well as work in a team.
How to Apply:
Please use our on-line application process.
You will need to cut and paste the following reference number to be used in the Keyword box to find the correct position.
Reference Number:
NC50177895
- Please click on the link below and put the Reference Number into the Keyword box and click on "Start".
- Click on the job title and following the application instruction.
Click Here to View Our Positions and Apply On-Line
Oak Ridge National Laboratory (ORNL)
Equal Opportunity Employer
UT-Battelle is committed to achieving its strategic business objectives by attracting, retaining and developing a diverse workforce.
|
