Cleared Senior​/Principal Cybersecurity - OT​/ICS Cybersecurity Engineer, Onsite

What Your Job Will Be Like

Are you passionate about research that keeps critical infrastructure safe and resilient in the face of cyber threats? Do you want to develop new defensive technologies, perform rigorous threat‑informed analysis, and quantify how cyber events can translate into real‑world physical consequences? If so, this is an opportunity to join Sandia’s multidisciplinary research community focused on securing the nation’s most vital cyber‑physical systems.

We are looking for experienced cybersecurity scientists and engineers with strong engineering fundamentals to join Sandia’s national security missions. In this role, you will have the opportunity to engage in research areas such as cyber‑physical system modeling and simulation, control‑theoretic and system‑level analysis under fault/adversarial conditions, physics‑informed and data‑driven anomaly detection using multi‑modal time‑series data, and testbed‑driven validation using digital twins and hardware‑in‑the‑loop environments.

In this role, you will contribute to research and development spanning the full cyber‑physical stack: from sensors, embedded and real‑time platforms, and industrial control environments to large‑scale operational networks and complex engineered processes (e.g., electric power and energy systems, industrial and manufacturing systems, and other critical infrastructures). You will work at the intersection of engineering physics, modeling and simulation, cybersecurity, and data‑driven analytics, helping create capabilities for monitoring, anomaly detection, consequence analysis, and resilient design.

• Develop, adapt, and apply physics‑based models and simulators for electrical and/or mechanical systems to evaluate system performance, resilience, and cyber‑physical risk.
• Conduct system‑level analyses (e.g., controls, power system dynamics, fluid/thermo‑mechanical behavior) to understand operational impacts of disturbances and adversarial events.
• Build analytic workflows for multi‑modal, time‑series datasets using numerical methods, statistics, and/or AI/ML approaches.
• Design and evaluate monitoring, detection, and anomaly‑identification approaches for cyber‑physical systems and critical infrastructure.
• Implement and maintain analysis code and prototypes (e.g., in Python and/or MATLAB), including verification, documentation, and reproducible workflows.
• Collaborate with multidisciplinary teams; communicate results through briefings, reports, and technical discussions with stakeholders.
• Lead teams of engineers and scientists to solve problems in new, novel ways.
• Engage with sponsors and potential new sponsors to explore new opportunities for solving mission challenges.

Due to the nature of the work, the selected applicant must be able to work onsite.

$117,500 - $235,700

* Salary range is estimated, and actual salary will be determined after consideration of the selected candidate's experience and qualifications, and application of any approved geographic salary differential.

• A Bachelor's degree in a relevant discipline and five (5) years of directly relevant experience, or an equivalent combination of directly relevant education and engineering or scientific experience that demonstrates the knowledge, skills, and ability to perform independent research and development.
• Active DOE Q‑level security clearance or equivalent (e.g., DOD Top Secret). The position will require the ability to maintain an SCI clearance, which may require a polygraph test.

The ideal R&D S&E, Cybersecurity candidate for Sandia National Laboratories will in addition possess the following:

• Graduate degree in Computer Science/Engineering, Electrical Engineering, Computer Information Systems, Computer Forensics, Mathematics or a directly related field where an independent research project was a graduation requirement (e.g., independent project, thesis, or dissertation).
• Experience in one or more of the following: reverse engineering, software vulnerability assessment, web application assessment, computer networking, computer architecture, compilers, or similar computer security topics.
• Proficiency in…