Computer Security Researcher

Idaho National Laboratory is hiring a Cybersecurity Researcher to work with our Cyber Research and Development department. Our team works a 9x80 schedule located out of our Education Research Campus (REC) in Idaho Falls, ID with every other Friday off.

You will apply advanced scientific and engineering principles to aid in the analysis, design, development, and assessment of secure computer systems and networks. Apply and/or evaluate security protocols, firewalls, intrusion detection systems, cryptography, formal methods, or security models to protect government systems. Utilize vulnerability assessment methodologies to the security policies and mechanisms at customer sites. Identify and develop advanced techniques for attacking, defending, identifying, and recovering from cyber-attacks. Coordinate resources and priorities to attain the desired cyber defense posture. Includes an in-depth knowledge of processors, machine level code, attack techniques, compilers, operating systems, network protocols, cryptographic protocols, and modeling, application of formal logic, and algorithmic analysis and design. You will report to the manager for our Cyber Operations and Incidence Response team.

This position will be open for around 90 days, and management will periodically review applications during this time.

Responsibilities Include:

• Analyze (reverse engineer) anomalous/malicious software and hardware firmware/binaries.
• Determine mitigation techniques and works with others to provide assistance and technical solutions for defensive resolution.
• Vulnerability assessments, penetration tests, and red teaming in Operational Technology (OT) and embedded system environments.
• Understanding of cybersecurity scenario development, testing generation, and developing and providing training for red teams against OT and embedded system infrastructure
• Determine and assist others in determining incident response actions and recommending mitigation strategies.
• Organize and participate in the development and maintenance of custom code used to analyze network traffic and proprietary protocols, develop attack and defense methodology and code on high-risk computer networks.
• Develop technical solutions for information operations and analysis related to national security topics intrusion analysis, malware, systems and vulnerabilities, network security, advanced analytic tools, and data visualization techniques.
• Work with peers, threat analysts, and senior engineers to identify security issues of existing control systems, platforms, and applications.
• Develop algorithms and methods for detecting and preventing cyber-attacks.
• Develop and maintain code used to find weaknesses in systems to verify and validate patch effectiveness.
• Conduct penetration testing and vulnerability assessments. Perform advanced analysis and/or reverse engineering of suspect source code, including compiled executables.
• Write scripts and develop software utilities to automate security analysis efforts. Working with senior program/technical staff plans, conducts assignments and review progress, and evaluates results.
• Work with customers independently or in teams to develop requirements, produce and test code, and provide necessary documentation.
• Participate in project teams to produce proposals for new work including joint projects with academia and industry.
• Maintain awareness of potential sponsors and their current objectives and funding levels. Continually build and maintain customer relationships and support customer requests with briefings and papers.
• Author technical papers, reports (final and progress) and proposals for internal and external release as well as represent the organization by giving technical presentations in public forums.
• Participate in both National and International forums for the development of significant new concepts or novel approaches to Malware and Cyber Security.

Minimum Requirements:

• Level1: Bachelor's degree in any related field in Data/Computer Science or closely related field. May accept experience in lieu of education commensurate with 8 years of experience in place of degree.
• Level 2: Bachelor's degree in any related field in Data/Computer Science or closely related field and at least 2 years professional experience, or a master's degree in any related field in Data/Computer Science or closely related field. May accept experience in lieu of education commensurate with 10 years of experience in place of degree.
• Experience in C programming with an ability to code in assembly, Zero Day exploits, and packet level programming.
• This position requires the ability to obtain and maintain a Department of Energy "Q" clearance, which requires US Citizenship.

Job Information:

• The pay range for this position is: Level 1 ($77,628 - $159,228) / Level 2 ($93,204 - $191,076). At Idaho National Laboratory compensation decisions are determined using factors such as education, relevant experience, and other credentials.
• TDP: This is a testing designated position; you will be required to submit to a pre-employment drug screen and periodic drug testing throughout the term of your employment.
• Multi-Level: This is a multi-level posting and you will be placed at the appropriate level dependent on depth and breadth of proven experience and skills.

Physical Requirements

While performing the duties of this classification, the employee is frequently required to stand, walk, sit, stoop, kneel, bend, use hands to handle materials, manipulate tools, keyboard and type, reach with hands and arms, and operate job related equipment. The employee must occasionally lift and/or move up to 25 pounds. Sufficient visual acuity and hearing capacity to perform the essential functions and interact with people is required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Benefits and Relocation

• Medical, Dental, Vision, and Flexible Spending Accounts
• 401(k) with a 4.2% employer contribution and up to 4.8% match
• Paid time off (personal leave)
• Employee Education Program (tuition assistance)
• Comprehensive Relocation Package
• Benefit eligibility subject multiple factors, including employment status and position classification.

INL is a science-based, applied engineering national laboratory dedicated to supporting the U.S. Department of Energy's mission in nuclear energy research, science, and national defense. With more than 6,300 scientists, researchers, and support staff, the laboratory works with national and international governments, universities and industry partners to change the world's energy future and secure our nation's critical infrastructure.

INL Mission

Our mission is to discover, demonstrate and secure innovative nuclear energy solutions, other clean energy options and critical infrastructure.

INL Vision

Our vision is to change the world's energy future and secure our nation's critical infrastructure.

Selective Service Requirements

To be eligible for employment at INL males born after December 31, 1959, must have registered with the Selective Service System (SSS). For more information see www.sss.gov.

Equal Employment Opportunity

Idaho National Laboratory (INL) is an Equal Employment Opportunity (EEO) employer. It is the policy of INL to provide equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information.

Reasonable Accommodation

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Other Information

When applying to positions please provide a resume and answer all questions on the following screens. Applicants, who fail to provide a resume or answer the questions, may be deemed ineligible for consideration.

INL does not accept resumes from third party vendors unsolicited.