Network Security Engineer - R&D

About the position

We're looking for a Network Security Engineer - R&D with a background in network security and an emphasis on operational technology networks. You will contribute to, provide subject matter expertise, and lead research projects in cybersecurity for critical infrastructure systems and civilian networks. This position is in the Global Security Computing Applications Division (GS-CAD) within the Computing Directorate, matrixed to the Global Security Directorate. This position will be filled at either level based on knowledge and related experience as assessed by the hiring team. Additional job responsibilities (outlined below) will be assigned if hired at the higher level.

Responsibilities

• Lead interdisciplinary teams of scientists and engineers on relevant national security projects and oversee analysis of OT and IT network data to identify potential vulnerabilities and indicators of compromise.
• Pursue program development opportunities by co-authoring proposals and proposing ideas that will address sponsor needs.
• Identify program growth opportunities towards development of custom network scanning and characterization tools for OT environments.
• Present results and provide subject matter expertise across multi-discipline projects engaging with sponsors on a regular basis.
• Test and validate new OT network characterization tools, working with LLNL's cyber-physical testbed team.
• Perform other duties as assigned.
• Oversee growth of existing and development of new network security capabilities at LLNL.
• Identify new applications and opportunities for network security capability growth and help create vision and technical direction in thrust area, working with program leadership.
• Develop new program growth opportunities through interactions with current and potential sponsors and the development of research proposals.

Requirements

• Ability to secure and maintain a U.S. DOE X-level security clearance which requires U.S. citizenship.
• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering or related field or the equivalent combination of education and related experience.
• Experience with at least one Programming Language (e.g., C, C++, Java, Python).
• Significant experience with Incident Response and threat hunting.
• Advanced proficiency using network packet analysis tools (e.g., tcpdump, wireshark, tshark, libpcap), doing network protocol analysis at various layers of the OSI model, and developing network analytics.
• Project leadership experience and ability to work independently while effectively managing concurrent technical tasks with competing priorities.
• Experience writing research proposals and securing sponsor funding, with advanced interpersonal, verbal, and written skills necessary to effectively collaborate in a team environment, present and explain technical information, and provide advice to management.

Nice-to-haves

• PhD in Cybersecurity, Computer Science, Computer Engineering or related field.
• Knowledge of and/or experience with one or more of the following: Penetration testing or red teaming, malware analysis, protocol dissectors and decoders, configuring and maintaining network sensors, and/or configuring and deploying network SIEM solutions.

Benefits

• Flexible Benefits Package
• 401(k)
• Relocation Assistance
• Education Reimbursement Program
• Flexible schedules (*depending on project needs)