Senior/Principal Cybersecurity - Systems Security Engineering, Onsite

About Sandia:

Sandia National Laboratories is the nation’s premier science and engineering lab for national security and technology innovation, with teams of specialists focused on cutting-edge work in a broad array of areas. Some of the main reasons we love our jobs:

• Challenging work with amazing impact that contributes to security, peace, and freedom worldwide

• Extraordinary co-workers

• Some of the best tools, equipment, and research facilities in the world

• Career advancement and enrichment opportunities

• Flexible work arrangements for many positions include 9/80 (work 80 hours every two weeks, with every other Friday off) and 4/10 (work 4 ten-hour days each week) compressed workweeks, part-time work, and telecommuting (a mix of onsite work and working from home)

• Generous vacation, strong medical and other benefits, competitive 401k, learning opportunities, relocation assistance and amenities aimed at creating a solid work/life balance*

World-changing technologies. Life-changing careers. Learn more about Sandia at: http://www.sandia.gov

*These benefits vary by job classification.

What Your Job Will Be Like:

Are you interested in defending and protecting our national security digital systems against advanced cyber threats? Would you like to contribute to the development of Sandia's risk management framework for digital systems? Are you up for the challenge to help enact a new vision for implementing digital systems security?

If so, the Digital Assurance team is looking for highly motivated and hardworking Systems Security Engineer (job title: R&D Cybersecurity) to implement systems security engineering for non-traditional digital systems. This individual must be passionate about securing, and supporting certification and accreditation of nuclear deterrent centric digital systems. Come join our team and make a national impact!

On any given day, you may be called on to:

• Define system security requirements (hardware/software/Data) from concept to production

• Partner with design and engineering teams to create secure systems

• Architect, design, and validate security implementations of digital systems

• Develop applicable security policies, standards, and procedures

• Identify and present innovative security solutions

• Develop and implement new technologies that can advance security of the system

• Lead technical design reviews of digital systems including security audits, and provide clear feedback and actionable solutions

• Lead and conduct security risk assessment, red-teaming exercise and provide vulnerability remediation guidance and recommendations

• Be an authority on security best practices and serve as a security subject matter expert for the design teams

Due to the nature of the work, the selected applicant must be able to work onsite in Livermore or Albuquerque. The preferred work location for this position is Livermore, CA.

Applicants on this requisition may be interviewed by multiple organizations at Sandia National Laboratories.

Salary Range:

$139,900 - $280,600

*Salary range is estimated, and actual salary will be determined after consideration of the selected candidate's experience and qualifications, and application of any approved geographic salary differential.

Qualifications We Require:

• A Bachelor's degree in a relevant discipline and five (5) years of directly relevant experience, or an equivalent combination of directly relevant education and engineering or scientific experience that demonstrates the knowledge, skills, and ability to perform independent research and development

• Ability to obtain and maintain a DOE Q-level security clearance

Qualifications We Desire:

The ideal R&D S&E Cybersecurity candidate for Sandia National Laboratories will in addition possess the following:

• Graduate degree in Computer Science/Engineering, Electrical Engineering, Computer Information Systems, Computer Forensics, Mathematics or a directly related field where an independent research project was a graduation requirement (e.g., independent project, thesis, or dissertation)

• Experience in one or more of the following: reverse engineering, software vulnerability assessment, web application assessment, computer networking, computer architecture, compilers, or similar computer security topics

• Proficiency in scripting or high-level programming

• Familiarity with secure-system design principles and information assurance principles

• Excellent communication skills and a demonstrated ability to develop technical ideas and results and present them in oral and written form in a concise manner

Also, for this posting we are seeking individuals with the following experience:

• Strong systems engineering background with interest in digital assurance and cybersecurity

• Experience with non-traditional IT systems product development

• Experience in one or more of the following areas: digital systems design, microelectronics, hardware security, embedded systems security, and/or software security

• Experience with building secure and reliable digital systems and the application of security controls

• Experience working with a federal cyber security program

• Experience crafting cyber security plans and/or performing cyber security assessments

• Knowledge and experience of DOE/NNSA cyber security orders and policies; relevant federal and private standards and requirements (e.g., NIST, ISO, CNSS, STIGS); and understanding of the Risk Management Framework as documented in various NIST publications

• Experience with secure-system design principles and information assurance principles

• Experience in digital systems design and in the field of hardware and embedded security

• Experience with hardware/software security verification or testing techniques

• Excellent leadership skills with the ability to prioritize and execute in a disciplined and focused manner

• Active DOE Q-level security clearance or equivalent DOD Top Secret level security clearance

About Our Team:

The Cyber & Digital Assurance Group is composed of four cyber security departments that conduct research, develop tools and methods, and work closely with customers to assure verification of high-consequence digital systems and to support cybersecurity of enterprise and weapons systems. We serve as local domain experts for Sandia/CA nuclear weapon system and component organizations, and as Sandia resources for cybersecurity operations, as well as for digital formal verification, rigorous cyber experimentation, and cyber risk assessments. We engage throughout the design-to-retirement lifecycle, and actively manage research collaborations with academic institutions. We are dedicated to supporting cybersecurity of Sandia and government systems, and digital assurance of a flexible and responsive nuclear deterrent that remains robust to an evolving environment.

Posting Duration:

This posting will be open for application submissions for a minimum of three (3) calendar days, including the 'posting date'. Sandia reserves the right to extend the posting date at any time.

Security Clearance:

Sandia is required by DOE to conduct a pre-employment drug test and background review that includes checks of personal references, credit, law enforcement records, and employment/education verifications. Applicants for employment need to be able to obtain and maintain a DOE Q-level security clearance, which requires U.S. citizenship. If you hold more than one citizenship (i.e., of the U.S. and another country), your ability to obtain a security clearance may be impacted.

Applicants offered employment with Sandia are subject to a federal background investigation to meet the requirements for access to classified information or matter if the duties of the position require a DOE security clearance. Substance abuse or illegal drug use, falsification of information, criminal activity, serious misconduct or other indicators of untrustworthiness can cause a clearance to be denied or terminated by DOE, resulting in the inability to perform the duties assigned and subsequent termination of employment.

EEO:

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status and any other protected class under state or federal law.

NNSA Requirements for MedPEDs:

If you have a Medical Portable Electronic Device (MedPED), such as a pacemaker, defibrillator, drug-releasing pump, hearing aids, or diagnostic equipment and other equipment for measuring, monitoring, and recording body functions such as heartbeat and brain waves, if employed by Sandia National Laboratories you may be required to comply with NNSA security requirements for MedPEDs.

If you have a MedPED and you are selected for an on-site interview at Sandia National Laboratories, there may be additional steps necessary to ensure compliance with NNSA security requirements prior to the interview date.

Job ID: 699628

Job Family: RD

Regular/Temporary Position: R

Full/Part-Time Status: F