The Cyber Security & Digital Operations Division at Pacific Northwest National Laboratory (PNNL) is looking for a Cyber Security Analyst to join our Advanced Introspection & Analytics team. We are seeking someone with a passion for cyber security who strives to deeply understand our adversaries and their associated tools, tactics, procedures, and goals. This team member will be focused on our Threat Hunting capability. As a member of our Cyber Security Operations group, you will develop innovative analytics and detection solutions and proactively hunt and respond to adversary actions against PNNL.

Responsibilities include:

Collaborate with Threat Intelligence & Threat Hunting team members to understand and prioritize potential threats and incidents.
Conduct in-depth analysis of security alerts, anomalies, and potential breaches to determine their nature and severity.
Utilize advanced threat hunting techniques to proactively search for signs of compromise within our network, systems, and cloud resources.
Research and stay updated on emerging cyber threats, attack techniques, and vulnerabilities to enhance threat detection methods.
Provide timely and accurate reporting on threat findings, trends, and incidents to management and stakeholders.
Collaborate with cross-functional teams to implement recommended security measures and remediation strategies.
Assist in the creation and enhancement of threat hunting playbooks and procedures.
Participate in incident response activities as needed, providing technical expertise and insights into threat behaviors.
Contribute to the refinement of the organization's threat intelligence framework.
Occasional weekend or evening “on-call” duties may be required to include rotational support schedules as well as infrequent, ad hoc emergency incident response coordination.

Minimum Qualifications:

BS/BA and 2 years of relevant experience -OR-
MS/MA -OR-
PhD

Preferred Qualifications:

Strong peer leadership, interpersonal, collaborative, and customer relationship skills with the ability to work effectively in a matrixed organization
Understanding of the cyber kill chain or attack vectors, red teaming and proactive cyber adversary hunting
Understanding of general cybersecurity principles, various technology solutions, and threat actor tactics, techniques, and procedures
Knowledge of foundational threat intelligence principles with a demonstrated understanding of how to apply them
Experience using the MITRE ATT&CK framework
Ability to rapidly learn and understand the application and impact of advanced and emerging technical security principles, theories, and concepts
Ability to conduct incident response lifecycle activities across detection & analysis, investigation & response, and recovery
Working independently and leading collective team efforts to develop theories, ideas, and concepts around cyber security methodologies

Jobs in Richland

PhD Candidate in Computer Science and Cybersecurity

Cyber Security Analyst 2