HPC Security Engineer: DevSecOps for Supercomputing

Oak Ridge National Laboratory; Oak Ridge (TN); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical plan

Retirement plan

Relocation assistance

Paid time off

Wellness programs

Educational assistance

Job summary

Oak Ridge National Laboratory is seeking an experienced security engineer to bridge hands-on engineering and governance for NCCS HPC infrastructure. You will drive DevSecOps, risk-based security, and secure design reviews across a Linux-focused environment, balancing scale with scientific integrity.

You will automate governance using IaC, translate requirements into implementable standards, and collaborate with incident response, vulnerability research, and policy teams to keep systems auditable

Qualifications

• BS degree in Computer Science, Cybersecurity, or related field.
• Minimum of two years of relevant experience.
• Strong understanding of US Federal cybersecurity frameworks and guidelines is preferred.

Responsibilities

• Translate complex technical concepts for scientists, operations, and management teams.
• Lead security reviews of new capabilities and designs against core security plans.
• Design, implement, and automate policy assessments to verify compliance.
• Engineer secure software development frameworks and guardrails for HPC scale.

Skills

Unix/Linux administration

Incident response

Threat modeling

Security architecture

Automation with IaC

Audit readiness

Communication

Documentation

Education

Bachelor's degree in Computer Science or related

Master's degree in Computer Science or related

Tools

SIEMs

Vulnerability scanners

NIDS/HIDS

Server telemetry

Job description

Oak Ridge National Laboratory is seeking an experienced security engineer to bridge hands-on engineering and governance for NCCS HPC infrastructure. You will drive DevSecOps, risk-based security, and secure design reviews across a Linux-focused environment, balancing scale with scientific integrity.

You will automate governance using IaC, translate requirements into implementable standards, and collaborate with incident response, vulnerability research, and policy teams to keep systems auditable