Cybersecurity Group Lead

Cybersecurity Group Lead

The National Energy Research Scientific Computing Center (NERSC) is inviting applications for the position of Cybersecurity Group Lead. NERSC's mission is to accelerate scientific discovery through high performance computing and data analysis for the Department of Energy (DOE) Office of Science programs. NERSC provides critical HPC and data systems and support for NERSC's 11,000+ users researching alternative energy sources, climate science, energy efficiency, environmental science and other DOE mission areas.

The NERSC Security Group Lead oversees a team of cybersecurity engineers whose role is to ensure secure access to NERSC's compute and storage resources for unclassified DOE research, balancing ease of access for users with robust security. The Cybersecurity Group is NERSC's front line in identifying, defending and responding to real and potential security incidents. The Group Lead must understand and document compliance with Lawrence Berkeley National Lab (LBNL), University of California, and DOE security requirements, and collaborate with internal and external stakeholders to strategize, implement, and maintain advanced security infrastructure and services.

The Group Lead will provide guidance and propose priorities to NERSC, including the Leadership team, and support NERSC's strategic plan and goals.

We're here for the same mission, to bring science solutions to the world. Join our team and YOU will play a supporting role in our goal to address global challenges! Have a high level of impact and work for an organization associated with 17 Nobel Prizes!

You will:

• Supervise and lead a team of security engineers responsible for the security architecture and infrastructure of NERSC. Participate in 24/7 on-call rotation, occasionally working outside of scheduled hours as needed, in investigating potential security issues through to resolution.
• Support NERSC's security risk management program and policy and compliance efforts, including incorporating requirements from DOE and government directives, while ensuring NERSC is able to maintain an open-science environment.
• Represent NERSC in interactions with (and presentations to) existing and prospective stakeholders.
• Collaborate effectively with peers and the Leadership team. Work with other NERSC teams to identify, explain and understand risks and advocate and architect more secure solutions.
• Lead the evaluation, development and implementation of security engineering technical and service designs and operations practices. Ensure practices are well communicated and integrated into day-to-day activities.
• Lead cross-organizational, long-term security projects supporting important deliverables, by:
• Assigning engineers and managing engineering resources for projects
• Deciding project execution and resource allocation
• Maintain an awareness of vulnerabilities, threats, and reasonable expectations of a security program by staying current on the latest news, trends, issues, tools, etc. related to cybersecurity.
• Work on and resolve significant and unique issues where analysis of situations or data requires an evaluation of intangibles.
• Represent and protect NERSC interests in all areas related to HPC cybersecurity, including (but not limited to) providing guidance and support for day-to-day operations, procurements, existing and new/evolving security technologies processes and tools (hardware and software), technical vendor management and vendor operational reviews.
• Provide effective line management for the Security team by leading recruitment and hiring efforts, mentoring, supporting professional development, giving constructive feedback and conducting performance management.

We are looking for:

• Bachelor's degree in Computer Science, Engineering or related field, and 8 years of experience, and/or equivalent combination of education and experience, including a minimum of three years of experience in a lead/supervisory role related to securing a complex computer system or high performance computing data center.
• Demonstrated expertise and experience in leading, hiring, training and mentoring technical staff.
• Experience developing security policy or compliance reports.
• Demonstrated experience in developing and implementing security engineering processes and plans.
• Experience delivering presentations to senior management and/or large stakeholders.
• Strong implementation project management experience.
• A deep understanding of cybersecurity principles with a demonstrated ability to think from a risk-based perspective, operating in an environment of ambiguity.
• Able to work on multiple high-profile projects and respond to rapidly changing priorities.
• Ability to exercise independent judgment in methods, techniques, and development of evaluation criteria for obtaining results.
• Ability to work on and resolve significant and unique issues where analysis of situations or data requires an evaluation of intangibles.
• Knowledge and experience guiding complex and currently applicable…