Senior R&D Systems Security Engineer: Subversion Risk Lead

Sandia National Laboratories; Albuquerque (NM); On-site; USD 102,000 - 200,000; Full time

Job summary

Sandia National Laboratories seeks a multidisciplinary R&D Systems Security Engineer to lead secure product realization for high-consequence national security systems. You will apply NIST SP 800-160 v1r1, Nuclear Enterprise Assurance practices, and risk-informed methods to integrate security and subversion-resilience across the full lifecycle.

Collaborating with Systems Engineers, hardware/software teams, cybersecurity experts, and intelligence partners, you will develop objective evidence,

Qualifications

• Bachelor's degree in a relevant discipline; five years of directly relevant experience or equivalent.
• Active DOE Q-Level security clearance required to start, or equivalent.
• Experience with threat modeling, risk assessment, systems security engineering, and NIST SP 800-160, RMF, or NIST SP 800-53 controls.

Responsibilities

• Develop, tailor, and implement Systems Security Engineering and Nuclear Enterprise Assurance processes informed by NIST SP 800-160 v1r1, ensuring security, trustworthiness, and assurance objectives are defined, flowed, traced, verified, and validated throughout the lifecycle.
• Lead, facilitate, perform, or coordinate subversion risk assessments including threat modeling, vulnerability assessments, material and supply-chain assessments, attack-surface analyses, and system-level risk evaluations.
• Identify, assess, and document subversion risks using applicable tools and resources, integrating technical, counterintelligence, intelligence, open-source, supply-chain, manufacturing, and programmatic information into risk management.
• Define, decompose, and flow system and subsystem security requirements into hardware, firmware, software, test, production, and sustainment architectures; develop verification/validation methods and acceptance criteria.
• Develop, review, and maintain security assurance documentation and objective evidence, including traceability matrices, Protection Plans, V&V plans, and assurance artifacts.
• Contribute to secure system conceptual designs by identifying security-relevant functions and dependencies, design vulnerabilities, and mitigation strategies.
• Integrate security assurance principles into design, development, production, test, deployment, operations, and sustainment activities to reduce subversion risk.
• Collaborate with multidisciplinary teams to integrate cybersecurity, anti-subversion, and assurance controls into product designs and processes.
• Apply scientific methods to evaluate subversion risks, validate assurance approaches, and identify opportunities to improve feasibility, producibility, quality, and assurance.
• Provide technical leadership in MBSE, digital engineering, security modeling, data integration, and knowledge-management; support traceability and AI-enabled analytics.

Skills

Systems Security Eng

Threat modeling

Risk assessment

NIST SP 800-160

Product lifecycle

DOE Q clearance

Education

Bachelor's degree in a relevant discipline

Tools

SysML

UML

Cameo

MagicDraw

Job description

Sandia National Laboratories seeks a multidisciplinary R&D Systems Security Engineer to lead secure product realization for high-consequence national security systems. You will apply NIST SP 800-160 v1r1, Nuclear Enterprise Assurance practices, and risk-informed methods to integrate security and subversion-resilience across the full lifecycle.

Collaborating with Systems Engineers, hardware/software teams, cybersecurity experts, and intelligence partners, you will develop objective evidence,