The NIE-ESS Computer Security Incident Response Team (CSIRT) is responsible for cyber incident response, host and network forensics, malware analysis, penetration testing, and the development of countermeasures and advanced detection techniques. As a member of CSIRT, the selected candidate will support cyber security penetration exercises to evaluate the security of LANL's computing infrastructure. Responsibilities include the following:

• Perform technical cyber security assessments of systems and services connected to LANL networks, and document actions, findings, and recommend corrective actions.
• Develop advanced methods, techniques, and standards for penetration testing and communicate findings to multiple audiences.
• Independently lead work on unusually significant or complex cyber exercises, providing guidance and direction as appropriate to other cyber security personnel.
• Serve as a penetration testing technical expert and interact with senior internal and external personnel.

Minimum Job Requirements:

• Experience leading penetration tests including the development of rules of engagement and working with stakeholders to identify test scope.
• Substantial experience performing penetration tests including technical assessment and customer communication.
• Expert knowledge of operating systems, networking protocols, and firewalls including common security controls and techniques to bypass such controls.
• Experience with programming or scripting languages such as C, C#, Python, Java, and PHP
• Advanced experience with developing custom exploit code and with testing web applications
• Strong technical writing skills.

Education/Experience: Cybersecurity Technical Staff 4 requires a bachelor's degree in a technical field and a minimum of 12 years' related experience, or an equivalent combination of education and experience.