Job Description (show details...)

Summary

Leads planning and coordination of one or more programs regarding a full range of security functions including, but not necessarily limited to, inspections, identification of vulnerabilities, and assessment of risks. Makes recommendations of appropriate and required security measures, techniques and methods to assure and improve the protection of personnel, activities, and Laboratory facilities. Specific duties may include establishing and monitoring security plans/goals and programs. Works with all levels of Laboratory management and represents the Laboratory to enforcement agencies and community organizations. Reviews and recommends actions on security-related complaints. Leads planning and coordination for the research, design, development and implementation of central security control system (Argus) computer security/protection and associated technologies for Laboratory information and process systems/applications.

Viewed as an expert in central security control system field within the Laboratory. Works on significant and complex security system issues and provides solutions/recommendations to security managers. Has impact on success of future concepts, products or technologies.

Job Duties

1. Safety and security are a primary responsibility for all Laboratory employees. Maintains required safety and security training, assures safety and security compliance, and makes safety and security an integral part of every task, including taking the necessary steps to stop work if continuing the job is unsafe or compromises security.
2. Responsible for computer and communications security for classified information.
3. Develops, maintains and audits the analytical and technical aspects of central security control system (Argus) and associated computer security systems.
4. Manages the installation, configuration, and maintenance of associated computer hardware.
5. Maintains integrity of computer workstations, servers, and local area networks by maintaining user accounts and upgrading systems and software as required.
6. Responsible for secure installation and operation of cryptographic equipment, secure transmission of classified information and sensitive unclassified information and protection of cryptographic principles and methods.
7. Leads the technical support, training and timely computer system data recovery.
8. Oversees the investigation of computer security incidents, and acts as lead analyst of computer facility protection plans.
9. Conducts complex surveillance of computer protection measures, and creates measurement tools for system vulnerability assessments.
10. Leads the development and implementation of policies, procedures, standards, training and methods for identifying and protecting information, personnel, property, facilities, operations, or material from unauthorized disclosure, misuse, theft, assault, vandalism, product tampering, espionage, sabotage, or loss.
11. Interprets and identifies computer and information security systems to ensure good business practices.
12. Demonstrates full understanding of federal and state regulations.
13. Understands and adheres to all Laboratory and industry regulatory guidance and governance specific to computer and information security.
14. Ensures all security systems, processes and final products meet quality specifications and are completed according to established requirements.
15. Fosters a mutually respectful work environment that is free from discrimination and harassment.

Job Knowledge

• Professional/specialized knowledge and experience with surveillance of computer protection measures and creating measurement tools for system vulnerability assessments.
• Comprehensive knowledge of operations and security requirements at the Laboratory, especially regarding central security control system (Argus), video equipment and software, and database to install, configure, and maintain security system. Highly specialized technical knowledge in Argus, providing subject-matter guidance on security system issues to the institution.
• Extensive knowledge and experience with computer security for classified information security and communications security systems.
• Advanced knowledge of security computer workstations, servers, and area networks.
• Technical knowledge of installation and operation of cryptographic equipment, secure transmission of classified information and sensitive unclassified information and protection of cryptographic principles and methods.
• Professional-level experience and demonstrated skill in conducting research, investigating alternative solutions, and recommending solutions on problems affecting computer and information security.
• Advanced skill to conceptualize and communicate major elements of security to both technical and non-technical personnel.
• Extensive experience in the preparation and presentation of computer and information security reports and in making recommendations to diverse audiences of internal/external audiences of both technical and nontechnical staff.
• In-depth experience developing and managing complex computer security plans.
• Comprehensive understanding of DOE and Laboratory computer and information security policies, practices, and procedures.
• Extensive knowledge and understanding of legal requirements and environmental impacts affecting computer and information security.
• Extensive experience solving problems at an institutional level working with core and field security management to provide recommendations of appropriate and required security measures, techniques, and methods to assure and improve the protection of personnel, activities and Laboratory facilities.
• Extensive high-level experience conducting security self-assessments, audits and inspections and root-cause analyses.

Education

• Position typically requires a bachelor’s degree and a minimum of twelve years related experience, or an equivalent combination of education and experience.  At this level, post graduate course work may be expected.

Direction

A. Supervision Received

• Virtually self-supervisory. Works under consultative direction toward predetermined long-range targets in Security Systems Group (SAFE-S3). Assignments are often self-initiated. Receives minimal functional and operational direction from the computer and information security manager.

B. Supervision Exercised

• Provides functional and operational direction for central security control system (Argus) and associated systems for Computer and Information Security support. May provide functional and operational direction to less-experienced computer and information security specialists.

C. Contacts

• Regular contacts throughout the Lab and external to the Laboratory. Contacts include all levels of Los Alamos and Lawrence Livermore National Laboratory staff, oversight organizations and assessment groups to provide computer and information security activities for central security control system (Argus) and associated systems. Regular interactions with key contacts in areas other than security, related to mission. May serve as the point of contact for implementation of specific security requirements and Department of Energy (DOE) directives.

This description is not intended to be a complete statement of every aspect of the position, but rather to act as a guide to the essential functions to be performed. Assigned functions of this job may vary, and other duties and responsibilities may be assigned or changed at the discretion of management.