Senior/Principal Cybersecurity - Systems Security Engineering

Sandia National Laboratories supports the Digital Assurance mission by building security into non-traditional digital systems. In this Senior/Principal Systems Security Engineering role, you will help define and validate security requirements, lead risk and red-teaming activities, and support certification and accreditation work for nuclear deterrent centric digital systems. The Cyber & Digital Assurance Group is research-focused, collaborates across the design-to-retirement lifecycle, and partners closely with teams responsible for high-consequence systems.

Location: Albuquerque, NM (onsite). The preferred work location for this position is Livermore, CA.

Salary: USD $139,900 - $280,600 per year. Salary range is estimated and will be determined based on experience and qualifications, including any approved geographic salary differential.

Responsibilities

• Define system security requirements spanning hardware, software, and data from concept through production
• Partner with design and engineering teams to create secure systems
• Architect, design, and validate security implementations for digital systems
• Develop applicable security policies, standards, and procedures
• Identify and present innovative security solutions
• Develop and implement new technologies to advance system security
• Lead technical design reviews for digital systems, including security audits, and provide clear, actionable feedback
• Lead and conduct security risk assessments and red-teaming exercises, including vulnerability remediation guidance and recommendations
• Serve as a security subject matter expert and provide security best-practice guidance to design teams

Requirements

• Bachelor’s degree in a relevant discipline and five (5) years of directly relevant experience, or an equivalent combination of directly relevant education and engineering or scientific experience demonstrating independent research and development capability
• Ability to obtain and maintain a DOE Q-level security clearance
• Onsite availability in Livermore or Albuquerque due to the nature of the work (preferred location: Livermore, CA)

Qualifications We Desire

• Graduate degree in Computer Science/Engineering, Electrical Engineering, Computer Information Systems, Computer Forensics, Mathematics, or a directly related field with an independent research project as a graduation requirement (independent project, thesis, or dissertation)
• Experience in one or more areas such as reverse engineering, software vulnerability assessment, web application assessment, computer networking, computer architecture, compilers, or similar computer security topics
• Proficiency in scripting or high-level programming
• Familiarity with secure-system design principles and information assurance principles
• Strong communication skills with a demonstrated ability to present technical ideas and results in oral and written form in a concise manner
• Strong systems engineering background with interest in digital assurance and cybersecurity
• Experience in non-traditional IT systems product development
• Experience in areas including digital systems design, microelectronics, hardware security, embedded systems security, and/or software security
• Experience building secure and reliable digital systems and applying security controls
• Experience working with a federal cyber security program
• Experience crafting cyber security plans and/or performing cyber security assessments
• Knowledge of DOE/NNSA cyber security orders and policies; relevant federal and private standards and requirements (including NIST, ISO, CNSS, STIGS); and understanding of the Risk Management Framework as documented in various NIST publications
• Experience in digital systems design, hardware and embedded security, and hardware/software security verification or testing techniques
• Excellent leadership skills with the ability to prioritize and execute in a disciplined and focused manner
• Active DOE Q-level security clearance or equivalent DOD Top Secret level security clearance

Benefits

• Generous vacation, strong medical and other benefits, competitive 401k, learning opportunities, relocation assistance, and amenities aimed at supporting work/life balance*
• Flexible work arrangements for many positions, including 9/80 (80 hours every two weeks with every other Friday off) and 4/10 compressed workweeks (four ten-hour days each week), part-time work, and telecommuting options including a mix of onsite work and working from home
• Benefits vary by job classification

Team Overview

The Cyber & Digital Assurance Group includes four cyber security departments that research, develop tools and methods, and work with customers to assure verification of high-consequence digital systems. The group supports cybersecurity of enterprise and weapons systems and serves as a local domain expert for Sandia/CA nuclear weapon system and component organizations, with additional support for digital formal verification, cyber experimentation, and cyber risk assessments across the design-to-retirement lifecycle.

Security Clearance and Screening

Sandia is required by DOE to conduct a pre-employment drug test and background review, including checks of personal references, credit, law enforcement records, and employment/education verifications. Applicants need to be able to obtain and maintain a DOE Q-level security clearance, which requires U.S. citizenship. If you hold more than one citizenship, your ability to obtain a clearance may be impacted. Applicants offered employment are subject to a federal background investigation to meet access requirements for classified information or matter when duties require a DOE security clearance. Substance abuse or illegal drug use, falsification of information, criminal activity, serious misconduct, or other indicators of untrustworthiness can lead to denial or termination of clearance, impacting the ability to perform the role and resulting in termination of employment.

NNSA Requirements for MedPEDs: If you have a Medical Portable Electronic Device (MedPED), such as a pacemaker, defibrillator, drug-releasing pump, hearing aids, or diagnostic equipment used to measure, monitor, or record body functions, you may be required to comply with NNSA security requirements for MedPEDs. If selected for an on-site interview, additional steps may be required to ensure compliance prior to the interview date.

EEO: All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected class under state or federal law.

Posting Duration: This posting will be open for application submissions for a minimum of three (3) calendar days, including the posting date. Sandia reserves the right to extend the posting date at any time.