Senior/Principal RD Cybersecurity - OT Cyber, Remote

Sandia National Laboratories; New Mexico; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible work arrangements

Relocation assistance

Comprehensive benefits

Job summary

Sandia National Laboratories in New Mexico is seeking a Senior/Principal RD Cybersecurity specialist focused on OT cybersecurity. The role involves researching vulnerabilities in programmable devices and collaborating with teams to protect national security.

The position supports mission activities in a dynamic environment with hybrid onsite/remote work options. We value candidates with advanced degrees and experience in OT security, reverse engineering, and information assurance.

Qualifications

• Bachelor’s degree in a relevant discipline and five (5) years of directly relevant experience.
• Ability to obtain and maintain a DOE Q Clearance.
• Graduate degree in Computer Science/Engineering or related field.
• Experience in reverse engineering, software vulnerability assessment, web application assessment, computer networking, computer architecture, compilers, or similar computer security topics.

Responsibilities

• Perform vulnerability assessments.
• Develop and implement defensive measures for critical OT systems and devices.
• Evaluate new information assurance technologies.
• Research, develop, and implement technology solutions to improve our partners, OT systems.
• Present and demonstrate your work to customers and senior laboratory leadership.

Skills

Reverse engineering

Software vulnerability assessment

Web application assessment

Computer networking

Computer architecture

Compilers

Scripting

High-level programming

Excellent communication skills

Education

Bachelor’s degree in a relevant discipline

Graduate degree in Computer Science/Engineering or related field

Job description

Senior/Principal RD Cybersecurity - OT Cyber, Remote

Sandia National Laboratories is the nation’s premier science and engineering lab for national security and technology innovation, with teams of specialists focused on cutting‑edge work in a broad array of areas.

Some of the main reasons we love our jobs:

• Challenging work with amazing impact that contributes to security, peace, and freedom worldwide
• Extraordinary co‑workers
• Some of the best tools, equipment, and research facilities in the world
• Career advancement and enrichment opportunities
• Flexible work arrangements for many positions include 9/80 (work 80 hours every two weeks, with every other Friday off) and 4/10 (work 4 ten‑hour days each week) compressed workweeks, part‑time work, and telecommuting (a mix of onsite work and working from home)
• Generous vacation, strong medical and other benefits, competitive 401k, learning opportunities, relocation assistance and amenities aimed at creating a solid work/life balance*
• World‑changing technologies. Life‑changing careers. Learn more about Sandia at: http://www.sandia.gov

*These benefits vary by job classification.

What Your Job Will Be Like:

Have you ever thought IT cybersecurity seemed too easy? Then maybe you’re ready to conduct applied research in OT cybersecurity! Today, the world is made up of programmable devices that interact with the physical world and experts in operational technology (OT) cybersecurity are needed to keep the nation and world safe. It will be your job to research and understand the vulnerabilities of these devices and develop creative, effective solutions that stymie our most sophisticated adversaries.

You will make an impact by addressing existing and emerging threats among a diverse customer set in a fast‑paced and dynamic environment where communication and collaboration are key elements of success. In our Computer Systems Security Analysis R&D department, you will partner with other organizations to serve Sandia’s mission by providing high‑quality computer security research and development in support of mission activities.

We’re looking for a true patriot that wants to begin a meaningful career in national security. If you want to use your cybersecurity expertise to serve the nation and solve our most difficult cybersecurity challenges, then join our team. Merica!

Key Responsibilities

To support Sandia’s national security missions, our cybersecurity scientists and engineers:

• Perform vulnerability assessments.
• Develop and implement defensive measures for critical OT systems and devices.
• Evaluate new, groundbreaking information assurance technologies.
• Research, develop, and implement technology solutions to improve our partners, OT systems.
• Support the development of innovative cyber systems.
• Propose new research internally and externally.
• Present and demonstrate your work to customers and senior laboratory leadership.

The selected applicant can work a combination of onsite and offsite work. While this position is ideally based on‑site in New Mexico with hybrid flexibility, remote work from any U.S. state may be considered. Candidates working remotely must be able to travel to the New Mexico site approximately once per month to support mission needs.

Salary Range:

*Salary range is estimated, and actual salary will be determined after consideration of the selected candidate’s experience and qualifications, and application of any approved geographic salary differential.

Qualifications We Require:

A Bachelor’s degree in a relevant discipline and five (5) years of directly relevant experience, or an equivalent combination of directly relevant education and engineering or scientific experience that demonstrates the knowledge, skills, and ability to perform independent research and development.

Ability to obtain and maintain a DOE Q Clearance.

Qualifications We Desire:

The ideal R&D S&E Cybersecurity candidate for Sandia National Laboratories will possess the following:

• Graduate degree in Computer Science/Engineering, Electrical Engineering, Computer Information Systems, Computer Forensics, Mathematics or a directly related field where an independent research project was a graduation requirement (e.g., independent project, thesis, or dissertation).
• Experience in one or more of the following: reverse engineering, software vulnerability assessment, web application assessment, computer networking, computer architecture, compilers, or similar computer security topics.
• Proficiency in scripting or high‑level programming.
• Familiarity with secure‑system design principles and information assurance principles.
• Excellent communication skills and a demonstrated ability to develop technical ideas and results and present them in oral and written form in a concise manner.
• Also, for this posting we are seeking individuals with the following experience:

• At least 10 years of experience in a relevant discipline with at least 5 years of experience researching, designing, or implementing OT cybersecurity solutions.
• Ph.D. in Computer Science, Electrical Engineering, Computer Engineering, or related technical field, with a focus on cybersecurity related course work or experience.
• Evidence of high academic achievement.

Experience in one or more of the following:

• OT device vulnerability analysis, OT system security, or OT cybersecurity policy.
• Platform security, hardware design and embedded systems security, and OT.
• Application of A.I. tools to solve cybersecurity problems.
• Reverse engineering, software vulnerability assessment, computer networking, computer architecture, or similar computer security topics.
• Multiple programming languages, including low‑level languages.
• Operating system development, hypervisor development, device driver development, firmware development, operating system internals or similar system software experience; Understanding of current and proposed advanced CPU features.
• Static and dynamic software analysis or debugging tools.
• Active DOE/DOD Q clearance or equivalent; Active SCI or ability to obtain.

About Our Team:

The Computer Systems Security Analysis R&D department carries out work to support various missions across Sandia and the federal government. The department focuses on computer system security surety and assessment of new technologies relating to IT and OT including software systems, computing systems, networks, and architectures of such systems. Topical areas include information assurance, digital forensics, cryptography, control systems analysis, vulnerability analysis, reverse engineering, secure architecture design, network analysis, and operational technology and industrial control systems. Some members of the team spend most days on‑site doing classified work, some telecommute and come on‑site once or twice a week, and others work virtually/remotely from other states with occasional travel to New Mexico.

Posting Duration:

This posting will be open for application submissions for a minimum of three (3) calendar days, including the “posting date.” Sandia reserves the right to extend the posting date at any time.

Security Clearance:

Sandia is required by DOE to conduct a pre‑employment drug test and background review that includes checks of personal references, credit, law enforcement records, and employment/education verifications. Applicants for employment need to be able to obtain and maintain a DOE Q‑level security clearance, which requires U.S. citizenship. If you hold more than one citizenship (i.e., of the U.S. and another country), your ability to obtain a security clearance may be impacted.

Applicants offered employment with Sandia are subject to a federal background investigation to meet the requirements for access to classified information or matter if the duties of the position require a DOE security clearance. Substance abuse or illegal drug use, falsification of information, criminal activity, serious misconduct or other indicators of untrustworthiness can cause a clearance to be denied or terminated by DOE, resulting in the inability to perform the duties assigned and subsequent termination of employment.

EEO:

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status and any other protected class under state or federal law.

NNSA Requirements for MedPEDs:

If you have a Medical Portable Electronic Device (MedPED), such as a pacemaker, defibrillator, drug‑releasing pump, hearing aids, or diagnostic equipment and other equipment for measuring, monitoring, and recording body functions such as heartbeat and brain waves, if employed by Sandia National Laboratories you may be required to comply with NNSA security requirements for MedPEDs.

If you have a MedPED and you are selected for an on‑site interview at Sandia National Laboratories, there may be additional steps necessary to ensure compliance with NNSA security requirements prior to the interview date.

• Affordable housing, reasonable cost of living
• Minimal traffic congestion compared to larger cities
• At Sandia, recruiters manually review resumes on each job posting instead of using a resume screening software program
• By following the best practices outlined, this ensures that recruiters can accurately determine your qualifications for the position