Security Researcher

• Category:
  Information Technology/Computing
• Job Code 2: SES.
  3 Science & Engineering MTS 3
• Employee Referral Bonus: $1500
• Job Code 1: SES.
  2 Science & Engineering MTS 2
• Pre-Employment Drug Test:
  Required for external applicant(s) selected for this position (includes testing for use of marijuana)
• Pre-Placement Medical Exam:
  Not applicable
• Security Clearance:
  Anticipated DOE Q clearance (requires U.S. citizenship and a federal background investigation)
• Position Type:
  Flexible Term or Career Indefinite

Join us and make YOUR mark on the World!

Lawrence Livermore National Laboratory (LLNL) has turned bold ideas into world-changing impact advancing science and technology to strengthen U.S. security and promote global stability.

Our mission spans four critical national security areas nuclear deterrence, threat preparedness, energy security, and multi-domain defense empowering teams to take on the toughest challenges of today and tomorrow. With a culture built on innovation and operational excellence, LLNL is a place where your expertise can make a real impact.

We have an opening for a Security Researcher to support efforts to develop techniques and tools for red teaming in support of the defense of critical infrastructure systems and Federal networks. You will contribute to moderately complex to complex security research and red teaming projects, developing and applying innovative methods to emulate cyber-adversary behavior and help develop tools used to defend critical U.S. infrastructure and networks.

Your expertise will support the advancement of cyber capabilities, threat analysis, and mitigation strategies for operational technology and industrial control systems. This position is programmatically in the Strategic Threat Analysis and Response (STAR) organization and administratively in the Global Security Computing Applications Division (GS-CAD) within the Computing Directorate.

This position will be filled at either level based on knowledge and related experience as assessed by the hiring team. Additional job responsibilities (outlined below) will be assigned if hired at the higher level.

You will

• Provide solutions to cyber research projects using creative and automated methods to identify vulnerabilities in software, firmware, and operational technology systems.
• Contribute to technical requirements for red team operations, penetration testing, and adversarial simulation capabilities at LLNL.
• Under limited direction, analyze software, firmware, and malware to identify weaknesses, malicious behavior, and potential attack vectors, developing repeatable workflows to support red team engagements.
• Contribute to source code, binary, and firmware analysis to identify vulnerabilities and support the development of proof-of-concept exploits and mitigations.
• Participate in the design, implementation and techniques for vulnerability assessment, penetration testing, and adversary emulation to improve understanding and mitigation of threats to operational technology.
• Monitor emerging threats and opportunities to enhance cyber defense and red team capabilities.
• Collaborate with sponsors and stakeholders to support program growth opportunities, research proposals, and alignment with mission objectives.
• Contribute to the development and execution of innovative approaches to meet sponsor and project needs in a rapidly evolving threat landscape.
• Collaborate with team members and contribute technical expertise to project and program activities.
• Perform other duties as assigned

Additional job responsibilities, at the SES.
3 level

• Guide the completion of complex technical projects and contribute to research direction, project planning, and technical strategy.
• Provide solutions to challenging cybersecurity complex problems and translate concepts into practical tools or software.
• Collaborate in the development of technical approaches, requirements, and project goals to address evolving Laboratory and sponsor needs.
• Engage with project teams external stakeholders to advance cybersecurity research and capabilities.

• Ability to maintain a U.S. DOE Q-level security clearance which requires U.S. citizenship.
• Bachelor's degree with significant focus in cybersecurity, computer science, information technology, computer engineering, or related technical field or the equivalent combination of education and related experience.
• Broad experience performing program analysis of source code, binaries, or firmware.
• Broad experience in the use…