HPC Security Engineer - DevSecOps & Policy

UT-Battelle; Oak Ridge (TN); On-site; USD 110,000 - 165,000; Full time

Job summary

UT-Battelle at Oak Ridge National Laboratory’s NCCS seeks an experienced security engineer to bridge hands-on engineering and governance for NCCS computing infrastructure. You will help apply DevSecOps and risk-based security practices to HPC, safeguarding open science publications and national interests relying on NCCS resources.

The HPC Cybersecurity Engineering team collaborates across incident response, blue team, vulnerability research, policy architecture, and DevSecOps to secure

Qualifications

• BS degree in Computer Science, Cybersecurity, or related field.
• MS preferred for advanced roles with eight+ years of experience.
• Equivalent combination of education and experience will be considered.

Responsibilities

• Translate complex technical concepts for scientific, operations, and management staff.
• Lead security reviews of new capabilities and designs against core security plans.
• Design, implement, and automate policy/control assessments for cybersecurity compliance.
• Engineer secure software development frameworks and guardrails for HPC scale.
• Define and implement technical baselines and best practices.
• Triage and respond to security events; participate in 24/7 on-call rotation.

Skills

Security engineering

DevSecOps

IaC automation

Risk-based security

Stakeholder communication

Education

BS in CS/Cybersecurity

MS in CS/Cybersecurity

Tools

SIEMs

Vulnerability scanners

NIDS/HIDS

Server telemetry

Configuration management

Job description

UT-Battelle at Oak Ridge National Laboratory’s NCCS seeks an experienced security engineer to bridge hands-on engineering and governance for NCCS computing infrastructure. You will help apply DevSecOps and risk-based security practices to HPC, safeguarding open science publications and national interests relying on NCCS resources.

The HPC Cybersecurity Engineering team collaborates across incident response, blue team, vulnerability research, policy architecture, and DevSecOps to secure