Cybersecurity Specialist

Job Description

Job Description

Cybersecurity Specialist

Work Location: Bettis Atomic Power Laboratory (West Mifflin, PA) OR Knolls Atomic Power Laboratory (Schenectady, NY) – single fixed site, employee's choice/assignment

Employment Type: Part-time – approximately 1,560 hours per period of performance (≈ 30 hrs/week average)

Core Hours: Coverage required 9:00 a.m.–3:00 p.m. local time, Mon–Fri (excl. Government holidays/shutdowns) ; flexible band 6:00 a.m.–6:00 p.m.

Required Clearance: DOE “Q” Access Authorization – must be obtainable prior to contract start (DoD clearance reciprocity accepted pending adjudication)

Contract Vehicle: GSA Schedule Task Order, Labor-Hour, 1 Base Year + 4 Option Years

Reports To: Contractor Program Manager, under technical direction of the NRLFO Contracting Officer's Representative (COR) / Director, Mission Support Division

Key Personnel Status: Designated Key Personnel – removal/replacement requires advance CO notification, justification, and written CO approval

Occasional Travel: Coordination/support at satellite sites may be required (BPMI Pittsburgh/Monroeville PA, BPMI Schenectady NY, Idaho Branch Office, Kesselring Site Office)

Position Summary

This position supports the Department of Energy (DOE) Naval Reactors Laboratory Field Office (NRLFO) Mission Support Division (MSD) under the Cyber/IT Support Services task order. NRLFO supports the Naval Nuclear Propulsion Program (“Naval Reactors”), providing IT, cybersecurity, and records-management support to Knolls Atomic Power Laboratory (KAPL), Bettis Atomic Power Laboratory (BAPL), Naval Reactors Facility (NRF), Naval Reactors Headquarters (NRHQ), and associated Bechtel and site offices. This is a Labor-Hour, non-personal-services position; the employee performs as a Contractor employee under Government technical direction, not as a Government employee.

The Cybersecurity Specialist leads and manages the classified and unclassified cybersecurity program at the assigned site office, ensuring compliance with DOE/NNSA cybersecurity directives. The role is compliance- and audit-driven rather than hands-on network engineering: the incumbent plans and leads compliance reviews and security surveys, evaluates contractor-implemented security programs, documents findings, and advises senior site leadership on risk and corrective action all within a high-consequence, high-visibility nuclear-security environment.

Key Responsibilities

• Lead the implementation and management of classified and unclassified cybersecurity programs at the assigned site office; assist with the same at other site offices as needed.
• Develop, maintain, and update local cybersecurity policies, procedures, and long-range plans aligned with DOE/NNSA directives and mission objectives.
• Interpret and apply national cybersecurity standards (DOE Orders, NNSA policy, DoD instructions, Intelligence Community directives) to site-specific implementation.
• Plan, schedule, and lead recurring cybersecurity compliance reviews and formal security surveys at NRLFO and contractor facilities.
• Evaluate the effectiveness of contractor security programs by examining policies, procedures, system security plans, and technical controls; identify findings, vulnerabilities, and non-compliance.
• Document and formally report review/audit/survey results, including findings, recommendations, and required corrective actions, to NRLFO leadership.
• Advise and train personnel on correct implementation of cybersecurity policy and standards.
• Identify and lead process-improvement initiatives and special projects to strengthen cybersecurity and IT management practices without impeding user productivity.
• Provide input on software application and IT enhancement needs that affect the cybersecurity posture.
• Maintain awareness of, and comply with, cyber, physical security, safety, and site-specific procedures at all times.

Required Qualifications

• Bachelor's degree (relevant field) plus 4+ years of directly relevant experience; OR a Master's degree in a related field plus 2+ years of relevant experience.
• At least 1 year of specialized cybersecurity experience at, or equivalent to, U.S. Government GS-12 level demonstrated ability to lead audits, compliance reviews, vulnerability assessments, or risk analyses, and to identify IT system vulnerabilities.
• Comprehensive working knowledge of Federal cybersecurity laws, regulations, and directives, including DOE Orders, NNSA policies, DoD instructions, and Intelligence Community directives, and how to implement them.
• Excellent verbal and written communication skills, with demonstrated ability to present complex technical findings and recommendations to senior leadership clearly and concisely.
• Demonstrated professionalism, self-motivation, and reliability able to operate independently in a high-visibility, mission-focused environment, under tight deadlines and shifting priorities, without close supervision.
• Ability to obtain and maintain a DOE “Q” clearance (U.S. citizenship and favorable background investigation required for Q access).

Preferred Qualifications

• Professional certification such as CISSP, CISM, or equivalent.
• Familiarity with software design concepts and multiple IT disciplines/infrastructure components, sufficient to collaborate across technical teams.
• Track record of proactively resolving complex security/IT issues and improving processes; ability to manage multiple concurrent tasks/projects to completion.
• Strong interpersonal and stakeholder-engagement skills across a wide range of Federal and contractor audiences.
• Prior experience drafting or implementing organizational cybersecurity policy, SOPs, or security plans.

Deliverables / Performance Expectations

• Complete, correctly named, and properly filed cybersecurity program documentation (subject to MSD quality-assurance spot checks).
• A federally auditable development/task tracking log, correctly named and filed.
• Weekly status reports summarizing completed work, outstanding items, risks, and recommended improvements.
• 100% self-reporting, in writing and immediately, of any performance deficiencies.