This position is part of the National Institute of Standards (NIST) Professional Research Experience (PREP) program. NIST recognizes that its research staff may wish to collaborate with researchers at academic institutions on specific projects of mutual interest, thus requires that such institutions must be the recipient of a PREP award. The PREP program requires staff from a wide range of backgrounds to work on scientific research in many areas. Employees in this position will perform technical work that underpins the scientific research of the collaboration.
Research Title:
Human-Centered Cybersecurity Research and Community Standards Development
The work will entail:
In direct support of NIST’s mission to advance measurement science and standards, the PREP student will work on Human-Centered Cybersecurity (HCC) projects. Human-centered cybersecurity is an approach that puts people at the forefront when designing and implementing cybersecurity systems, products, and processes by considering human needs, motivations, behaviors, and abilities. Under the guidance of a NIST sponsor, the student will contribute to a project to develop a standard description of human-centered-cybersecurity. In addition, the student will help develop guidance, mapped to the NIST Cybersecurity Framework 2.0, on how to apply HCC concepts within organizations. The work will include data collection and analysis for a research study aimed at understanding current perceptions of human-centered cybersecurity among various groups of cybersecurity stakeholders. The student will also assist NIST staff with mapping HCC concepts to the NIST Cybersecurity Framework by searching for and summarizing applicable human factors frameworks, organizing and synthesizing public comments, and writing guidance. This is an excellent opportunity to contribute to community standards for human-centered cybersecurity that may be used around the world.
Key responsibilities will include but are not limited to:
- Conducting qualitative and quantitative survey or interview data collection and analysis
- Performing searches and syntheses of research literature and industry reports related to the human element of cybersecurity
- Assisting in the organization and agenda development of public workshops
- Organizing, synthesizing, and helping to adjudicate public comments/feedback
- Writing/preparing reports, research papers, and presentations
- Presenting results at internal and external meetings
Qualifications
- In-progress graduate degree (Master’s or PhD) in social science, human-computer interaction, human factors, computer science, cybersecurity or other field related to human-centered cybersecurity
- Competency in quantitative or qualitative research methods and data analysis
- Experience with and working knowledge of cybersecurity is desirable but not required
- Ability to work both in teams and independently
- Strong organizational skills
- Strong oral and written communication skills
The university is an Equal Employment Opportunity/Affirmative Action employer that does not unlawfully discriminate in any of its programs or activities on the basis of race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity or expression, or on any other basis prohibited by applicable law.