Cyber Counterintelligence Officer

Join Los Alamos National Laboratory in an onsite role focused on protecting Department of Energy information, personnel, and assets. This Cyber Counterintelligence position applies cyber technical expertise to support DOE Office of Intelligence and Counterintelligence investigations and operations, with work that spans digital forensics, cyber intelligence analysis, and reporting.

Salary: USD 117,200 - 195,400 per year. Location: Los Alamos, NM (onsite). Experience: minimum 8 years. Education: Bachelor’s Degree in a technical field.

What you will do

• Conduct cyber counterintelligence activities to protect DOE information, personnel, and assets from foreign intelligence entities and terrorist threats.
• Provide technical expertise and investigative strategies to support Cyber CI and Counterterrorism investigations.
• Review classified and unclassified reporting, correlate findings with local data and Cyber Intelligence Center data, and identify indicators of foreign targeting or activity.
• Develop and apply cyber tools and best practices to strengthen the counterintelligence mission.
• Analyze classified and unclassified IT systems to identify vulnerabilities and intrusion indicators of CI concern; collaborate with Los Alamos National Laboratory cyber security teams and interagency partners.
• Collect, triage, and perform forensic examinations of digital media using forensic best practices.
• Draft and contribute to intelligence reports and coordinate cyber intelligence reporting with LANL CSIRT and the Cyber Intelligence Center.

Required qualifications

• Advanced experience conducting cyber and counterintelligence investigations and the ability to work with interagency partners.
• Demonstrated cyber investigative knowledge within counterintelligence, including collection, analysis, evaluation, and dissemination of CI-cyber information.
• Advanced technical knowledge of classic and contemporary cyber threats and vulnerabilities, with demonstrated ability to apply it to system engineering, analytics, or operations.
• Demonstrated experience with network system forensics, packet capture analysis, and enterprise-level incident response and host forensics.
• Advanced knowledge of Windows and Linux workstation and server management.
• Advanced knowledge of current network technology, including network protocols, infrastructure elements, and network applications, services, and related protocols.
• Demonstrated advanced knowledge of distributed systems, including system architectures, computer networks, and software.
• Strong interpersonal skills to build trusting relationships within the office, Laboratory, and with external partners.
• Ability to communicate technical topics to a variety of audiences.
• Ability to produce well written reports and presentations to document work and support threat assessments.
• Position requires a Bachelor’s Degree in a technical field and a minimum of 8 years related experience, or an equivalent combination of education and experience directly related to the occupation.
• At this level, post graduate work may be expected.

Technologies you may work with

• Windows, Linux, and Windows and Linux workstation/server management
• Packet capture analysis
• VMware
• AWS, Azure, and Office 365
• Mobile communication systems and technologies
• Industrial Control Systems (ICS) and Human Machine Interface (HMI)
• Cloud based environments

Benefits

• PPO or High Deductible medical insurance with a large nationwide network
• Dental and vision insurance
• Free basic life and disability insurance
• Paid childbirth and parental leave
• Award-winning 401(k) with 6% matching plus 3.5% annually
• Learning opportunities and tuition assistance
• Flexible schedules and time off (PTO and holidays)
• Onsite gyms and wellness programs
• Extensive relocation packages (outside a 50 mile radius)

Clearance and eligibility

• Q/SCI required. Selected applicants will be subject to a background investigation by or on behalf of the Federal Government.
• To obtain a Q clearance, US Citizenship is required except in extremely rare circumstances.
• Additional access authorization may be required depending on the position and may or may not be available to dual citizens.
• To obtain a clearance, an individual must be at least 18 years of age, and U.S. citizenship is required except in very limited circumstances (see DOE Order 472.2).

Additional notes

• Please attach a cover letter addressing how you meet the requirements for the position.
• New-employment drug test is required, and the Laboratory maintains a substance abuse policy that includes random drug testing. Marijuana use and possession remain illegal under federal law.
• Employment requires a favorable decision by NNSA indicating the employee is suitable under NNSA Supplemental Directive 206.2.
• Position commitment: 1 year. Regular appointment employees must serve continuous service in their current position to be eligible to apply for posted jobs.

Desired qualifications

• Master’s degree in Computer Science, Information Systems, or a closely related field.
• Experience with mobile communication systems and technologies, particularly those relating to forensics analysis.
• Knowledge of Industrial Control Systems (ICS) and Human Machine Interface (HMI) vulnerabilities and mitigation techniques.
• Knowledge of cloud based environments including VMware, AWS, Azure, and Office 365.