Cybersecurity Analyst III

Job Title:

Cybersecurity Analyst III Req. #: 1460-

E Posting Date:

5/26/26 -

Until Filled Compensation:

$92,703 - $113,269 West Valley Cleanup Alliance is the prime contractor selected by the U.S. Department of Energy to manage the Phase 1B Deactivation & Demolition Contract at the West Valley Demonstration Project site. The site is a scenic 30-minute drive south of Buffalo, New York. In cooperation with the New York State Energy Research and Development Authority, West Valley Demonstration Project continues to decontaminate and decommission facilities at this site. West Valley Cleanup Alliance is a premier employer in the Western New York and southern-tier areas. Our benefit and compensation package includes: competitive pay and opportunity for variable pay incentives extensive benefit offerings focused on your physical, financial, and emotional wellness 401(k) employer match and enhanced employer contributions - up to 9% total company contribution! 4-day workweek (10 hours per day) for most positions tuition reimbursement & professional development atmosphere fostering work-life balance Lifelong careers are common at West Valley Demonstration Project. If you are interested in joining the West Valley Cleanup Alliance family, apply for one of our current job openings on the WVCA Career Page. Job Summary / Purpose of Position The Cybersecurity Analyst III is responsible for supporting the development, implementation, and management of the West Valley Cybersecurity Program with specific focus on analysis, documentation, and/or programmatic aspects of the cybersecurity program. This is an onsite position located in West Valley, NY.

Minimum Qualifications Education/Experience:

BA/BS in Computer Science/Engineering, Information Systems, or other technical degree or an equivalent combination of education and experience directly related to occupation. Minimum of four (4) years of related experience.

Preferred Qualifications:

Experience in cybersecurity or IT operations. Familiarity with NIST 800-53 and DOE cybersecurity requirements.

Other Requirements:

Excellent written and verbal communication skills. Knowledge and experience with MS Windows Active Directory (AD) administration and Windows operating system patching. Knowledge and understanding of network TCP/IP troubleshooting. Knowledge and understanding of enterprise antivirus solutions, endpoint data protection, and encryption. All qualified candidates are encouraged to apply. The salary and grade level offered to the selected candidate will be based on the candidate's education, training, and/or relevant experience. Major Responsibilities / Scope of Work Maintain a safe and healthful work environment by following established safe work practices and procedures; including following all safety rules, using proper personal protective equipment (PPE), investigating and reporting identified safety concerns or situations. Adhere to standards contained in the Company Code of Conduct, Company EEO practices, and DOE directives. Create and manage cybersecurity documentation and implement policies and procedures to address compliance with DOE requirements and standards. Ensure accurate identification of the risk profile for DOE acceptance and maintaining the West Valley Authority to Operate. Provide guidance and assist in development and management of supporting documentation. Manage the performance and review of risk assessments for new hardware, software, cloud-based solutions, and network connectivity requests. Assist requestors in the development of any necessary risk assessment documentation. Create and review Information Technology Plan of Action & Milestone Requests and assist with the development and management of Plans of Actions and Milestones. Assist with conducting vulnerability scanning and monitoring, identify mitigation and remediation actions for implementation by the responsible organization and assist with the identification of risk for submission, as needed. Develop and maintain actionable metrics for ongoing review and management of vulnerabilities and remediation efforts and for regular reporting to DOE. Support the cybersecurity technical and administrative management of vulnerability management tools. Support internal and external audits, assessments, and reviews; assist with responding to security assessment reports; develop action items and plans to address noted deficiencies and opportunities for improvement. Identify improvement initiatives to mature the cybersecurity program and participate in the development and implementation of selected ideas. Support the development and delivery of input to user awareness training and required annual training for cybersecurity elements. Respond to data calls by collecting and providing requested information. Participate in cross-training efforts with other cybersecurity team members and provide backup support for activities and responsibilities. Develop, implement, and maintain an internal assessment program to validate program compliance as part of continuous monitoring efforts. Contribute to team effort by accomplishing related results as needed. Essential Functions Work independently on complex computer technology activities and recommend changes in systems and procedures. Research and lead the resolution of moderately complex technical issues. Use judgment to perform, identify, and analyze diverse work control responsibilities involving different and unrelated processes and methods. Isolate and define unknown conditions, resolve critical issues, or develop new theories according to industry principles, theories, and laws. Interface and effectively communicate with personnel inside and outside the organization and senior management to explain proposals or recommendations. Plan and coordinate project activities, influence, and motivate project members to accomplish assigned tasks in a timely manner. Regular, reliable onsite attendance is an essential function of this position. An Equal Opportunity Employer, including disability/vets. U.S. Citizenship is required for employment. This Organization Participates in E-Verify. WVCA is a drug-free workplace. Candidates accepting a job offer will be required to pass pre-placement physical, drug screen, and background investigation. All employees are subject to being randomly selected for drug testing without advance notification.