Argonne National Laboratory has an opportunity for a Cyber Security Engineer within the Cyber Security Program Office (CSPO). The CSPO is a team responsible for identifying, detecting, protecting, responding, and recovering from cyber security incidents and risks at Argonne National Laboratory. We are looking for an individual to help ensure the security requirements necessary to protect our organization are communicated, implemented, and effective. This role will work with many business groups across the Laboratory to identify security flaws and gaps in system or control design and recommend remediation or mitigations. This individual will also provide ownership and maturation of various security tools operated by the cyber security team.

Key Responsibilities:

• Provide development, maturation, and ownership of designated security tools, platforms, or capabilities

• Assess the effectiveness of cyber security measures utilized by systems

• Provide guidelines for implementing secure systems

• Develop specific cyber security plans, countermeasures, and risk mitigation strategies for vulnerabilities, systems and/or applications and recommend security changes to system or system components as needed

• Assess threats to and vulnerabilities of computer systems to develop a security risk profile

• Determine the protection needs (i.e., security controls) for the information system(s) and network(s) and document appropriately.

• Evaluate security architectures and designs to determine the adequacy of security design and architecture in response to requirements

• Provide input on security requirements to be included in statements of work and other appropriate documents

• Perform security architectural reviews and assist with incorporating security features into products and platforms.

• Perform industry research on new security protocols, methodologies, and evangelize security at all levels of the organization.

• Perform other duties as may be assigned.

Position Requirements

To perform the essential functions of this position successful applicants must provide proof of U.S. citizenship, which is required to comply with federal regulations and contract and must be able to obtain and maintain a DOE Q or L clearance.

• Knowledge of modern security engineering concepts and security-by-design principles including cyber security and privacy principles, cyber threats and vulnerabilities, cyber security architecture, practices, tools, and techniques, and specific operational impacts of cyber security lapses

• Knowledge of networking concepts and OS administration

• Knowledge of system administration, network, and operating system hardening techniques

• Skill in collecting and correlating data from a variety of resources

• Skill in conducting vulnerability scans and recognizing vulnerabilities in systems

• Skill in designing countermeasures to identified security risks

• Skill in translating operational requirements into protection needs (i.e., security controls)

• Skill in evaluating the adequacy of security designs and how a system should work in various conditions or environments

• Experience assessing security controls based on cyber security principles and tenets (e.g. CIS CSC, NIST CSF, NIST SP 800-53, NIST 800-171, CMMC)

• Experience building zero-trust architecture (ZTA).

• Experience with red team/penetration-test processes and blue team defensive applications.

• Experience collaborating with various teams

• Ability to skillfully communicate with various methods and audiences

• Ability to work well with others and facilitate conversation amongst a small group of professionals

• ​Ability to model Argonne’s Core Values: Impact, Safety, Respect, Integrity, and Teamwork

Any combination of the following knowledge, skills and experience is preferred:

• Supporting security for scientific, research, or academic institutions

• Real-world experience in a major cloud environment (e.g., AWS or Microsoft Azure)

• Project management experience

• Knowledge of Agile project-management best practices

• Knowledge of the NIST Cyber Security Framework

• Experience with organizational cyber security tools and capabilities (e.g., Axonius, Splunk, Tenable.sc, CrowdStrike, etc.)

• Certifications: A+, Network+, Security+, CySA+ and/or specific industry certifications (e.g., AWS, Cisco, Azure, etc.)

Job Family

Job Profile

Worker Type

Time Type