Adversarial Cybersecurity Researcher

National Renewable Energy Laboratory; Golden (CO); On-site; USD 100,400 - 216,700; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Tuition reimbursement

403(b) Employee Savings Plan with employer match

Job summary

The National Renewable Energy Laboratory in Golden, CO is seeking a mid-career Adversarial Cybersecurity Researcher to join its Cybersecurity Research Center. The role focuses on developing tools and conducting research at the intersection of cybersecurity and energy systems.

Responsibilities include leading adversarial research initiatives, conducting thorough vulnerability assessments, and mentoring junior staff. Candidates should possess relevant experience and the ability to secure a DOE security clearance.

Qualifications

• PhD in a relevant field or equivalent experience.
• 7+ years of experience in cybersecurity research.
• Ability to obtain and maintain DOE security clearance.

Responsibilities

• Lead adversarial research initiatives targeting energy systems.
• Conduct advanced adversarial analysis and vulnerability assessments.
• Mentor junior researchers and guide project execution.

Skills

Cybersecurity research

Adversarial analysis

Problem-solving

Leadership

Python programming

Threat modeling

Communication

Education

PhD in relevant field

Master's Degree

Bachelor's Degree

Tools

Python

C/C++

PowerShell

Job description

Adversarial Cybersecurity Researcher

Location: Golden, CO

Position Type: Regular

Hours per Week: 40

Job Description

The National Laboratory of the Rockies (NLR) is looking for a mid‑career Adversarial Cyber Researcher to join its Cybersecurity Research Center (CRC). The CRC conducts applied research at the intersection of cybersecurity, energy systems, and national resilience, developing the tools, methods, and scientific foundations necessary to secure and sustain the nation’s evolving energy infrastructure.

Key Research Responsibilities

Researcher IV Responsibilities

• Lead adversarial research initiatives targeting energy sector systems, including threat emulation, cyber range experimentation, and model-based simulation, defining experimental objectives and strategies.
• Independently design, execute, and evaluate complex adversary–defender studies, including multi‑stage attack‑chain modeling, vulnerability exploration, and defense validation, ensuring reproducible and rigorous research outcomes.
• Lead development and validation of cybersecurity research tools, simulation frameworks, and automation scripts, ensuring integration with multiple projects and broader laboratory initiatives.
• Extend and operationalize threat modeling methodologies (e.g., MITRE ATT&CK, ATT&CK for IC S) for large‑scale experimental design and system‑level defense evaluation.
• Integrate research outcomes into system‑level risk, resilience models, and quantitative performance metrics, influencing laboratory‑wide strategies and priorities.
• Conduct advanced adversarial analysis and vulnerability assessments of IT, OT, and hybrid energy systems, producing insights for architecture improvement and defense strategies.
• Lead the preparation of research proposals, technical publications, and conference presentations, shaping research directions and laboratory reputation in the field.
• Drive interdisciplinary collaboration across power systems, controls, and modeling teams, bridging cyber‑physical domains and guiding project execution.
• Support and expand NLR’s adversarial research infrastructure, including cyber ranges, digital twins, and experiment orchestration frameworks, through leadership and mentorship.
• Mentor and guide junior and mid‑level researchers, promoting professional development, fostering a positive research culture, and building laboratory‑wide capability in adversarial modeling and defense research.

Researcher III Responsibilities

• Conduct adversarial research on energy sector systems, including threat emulation, cyber range experimentation, and model‑based simulation, with guidance from senior researchers.
• Design, execute, and evaluate controlled adversary–defender studies, such as attack‑chain modeling, vulnerability exploration, and defense validation experiments, contributing to reproducible research outputs.
• Develop and validate cybersecurity research tools, simulation frameworks, and automation scripts to support quantitative analysis of cyber‑physical dynamics.
• Apply and extend threat modeling methodologies (e.g., MITRE ATT&CK, ATT&CK for ICTS) to inform experimental design and system‑level defense evaluation.
• Integrate research outcomes into system‑level risk and resilience models, simulation environments, and performance metrics, under supervision as needed.
• Conduct adversarial analysis and vulnerability assessments of IT, OT, and hybrid energy systems, identifying insights for defense design improvements.
• Contribute to research proposals, technical publications, and conference presentations, supporting team‑level advancement of cybersecurity science.
• Collaborate with interdisciplinary teams in power systems, controls, and modeling to bridge cyber and physical domains in experiments and model development.
• Support the growth of NLR’s adversarial research infrastructure, including cyber ranges, digital twins, and experiment orchestration frameworks, through direct contributions and process improvement.
• Provide mentorship to junior staff, including interns or early‑career researchers, supporting skill development and laboratory capabilities.

Basic Qualifications

Researcher IV

• Relevant PhD and 4 or more years of experience.
• Or, relevant Master’s Degree and 7 or more years of experience.
• Or, relevant Bachelor’s Degree and 9 or more years of experience.
• Demonstrated in‑depth knowledge of laws, regulations, principles, procedures, and practices related to the field.
• Excellent leadership, communication, problem‑solving, and project management skills.
• Ability to use various computer software programs.

Researcher III

• Relevant PhD.
• Or, relevant Master’s Degree and 3 or more years of experience.
• Or, relevant Bachelor’s Degree and 5 or more years of experience.
• Demonstrates broad understanding and wide application of engineering technical procedures, principles, theories, and concepts in the field.
• General knowledge of other related disciplines.
• Demonstrates leadership in one or more areas of team, task, or project lead responsibilities.
• Demonstrated experience in management of projects.
• Very good writing, interpersonal, and communication skills.

Additional Required Qualifications

• Must be able to obtain and maintain a DOE security clearance at the Q/TS/SCI level.
• A polygraph may be required.
• Eligibility requirements: To obtain a clearance, an individual must be at least 18 years of age; U.S. citizenship is required except in very limited circumstances.
• See DOE O 472.2A for additional information.
• Understanding and application of project management principles, concepts, practices, and standards.
• Ability to travel as needed up to 25%.

Preferred Qualifications

Researcher IV

• Proven leadership in offensive cybersecurity research, including planning and executing complex experiments with strategic impact.
• Deep expertise in cyber modeling and simulation for applied R&D, including digital twins, discrete‑event simulation, and hardware‑in‑the‑loop testbeds.
• Advanced proficiency in Python, PowerShell, C/C++, or other languages, enabling automation, data‑driven analysis, and modeling integration across projects.
• Expert‑level knowledge of I CS, OT, and energy sector systems, including protocols, architectures, and security considerations.
• Demonstrated ability to lead reproducible cyber experiments, applying scientific rigor and guiding project teams in methodology, analysis, and validation.
• Established record of publications, technical reports, and funded proposals, with experience translating findings into actionable outcomes for sponsors.
• Excellent communication, presentation, and stakeholder engagement skills, influencing cross‑disciplinary teams and external partners.
• Demonstrated ability to independently lead projects, mentor junior staff, and develop laboratory‑wide adversarial research capabilities.

Researcher III

• Demonstrated experience conducting offensive cybersecurity research, including penetration testing, exploit development, threat emulation, or vulnerability analysis, with an applied understanding of defensive evaluation.
• Working knowledge of cyber modeling and simulation approaches, including digital twins, discrete‑event simulation, and hardware‑in‑the‑loop testbeds for energy systems.
• Proficiency in Python, PowerShell, C/C++, or other scripting/programming languages to support experiments, data analytics, and modeling workflows.
• Applied understanding of I CS, OT, and energy sector architectures, including communication protocols and configurations.
• Ability to design and execute reproducible cyber experiments, applying scientific rigor to data collection, analysis, and validation.
• Contributed to peer‑reviewed publications, technical reports, and sponsored research proposals.
• Strong technical writing and presentation skills, capable of communicating results to internal and external stakeholders.
• Ability to work independently and collaboratively across multiple projects, contributing to mission‑driven research.
• Interest in mentoring junior staff and supporting team development.

Salary Range

Researcher IV: $120,400 – $216,700 per year (based on full‑time 40 hours per week)
Researcher III: $100,400 – $180,700 per year (based on full‑time 40 hours per week)

Benefits Summary

• Medical, dental, and vision insurance.
• Short‑ and long‑term disability insurance.
• Pension benefits.
• 403(b) Employee Savings Plan with employer match.
• Life and accidental death and dismemberment (AD&D) insurance.
• Personal time off (PTO) and sick leave.
• Paid holidays.
• Tuition reimbursement.
• NLR employees may be eligible for, but are not guaranteed, performance‑, merit‑, and achievement‑based awards that include a monetary component.
• Some positions may be eligible for relocation expense reimbursement.
• Limited‑term positions are not eligible for long‑term disability or tuition reimbursement.
• * Based on eligibility rules.

Equal Opportunity Employer

All qualified applicants will receive consideration for employment without regard to age, color, disability, gender identity, genetic information, marital status, domestic partner status, military or veteran status, national origin, ancestry, race, religion, creed, sex (including pregnancy, childbirth, breastfeeding), sexual orientation, and any other applicable status protected by federal, state, or local laws.