Information Systems Security Engineer - ACTIVE SECURITY CLEARANCE REQUIRED

LLNL•Livermore, CA

1d•Onsite

About The Position

Lawrence Livermore National Laboratory (LLNL) is hiring an Information Systems Security Engineer to provide cyber and technical support for classified networks, standalone systems, security systems, and tools for vulnerability management, patch management, and auditing. The position manages complex security plans and component configurations, maintains cybersecurity tools, leads incident response, and leads large-scale computer security projects. The engineer works regularly with team members, customers, management, and sponsors to resolve complex cyber problems. The position is in the Information Technology Solutions (ITS) Division, supporting the Field Intelligence Element (FIE) within the Computing Directorate. Full-time on-site presence is required. The position may be filled at the SES.3 or SES.4 level, based on the hiring team's assessment of knowledge and related experience. At either level, the engineer serves as an Information Systems Security Engineer (ISSE), authoring and owning comprehensive cybersecurity document packages; planning, designing, and evaluating complex cybersecurity solutions; performing vulnerability remediation, computer-log audits, and creating policy, procedure, test-plan, and risk-analysis documentation; inspecting systems for compliance; and working with system administrators to maintain security and accreditation status. The role also collaborates with customers on computing-environment design and security-management processes, researches solutions, manages cybersecurity projects across multiple environments, and performs other assigned duties. At the SES.4 level, the engineer partners with the FIE Cyber Manager to collaborate and negotiate with internal and external stakeholders, including LLNL, DOE, and other agencies. They identify, prioritize, and oversee security solutions that meet mission requirements; provide security-architecture guidance and oversight to ensure compliance with LLNL, DOE, and customer requirements and program risk and authorization objectives; and establish priorities, allocate resources, manage schedules, and deliver complex cybersecurity projects within cost and time constraints. The role requires an active DOE Q-level clearance or active Top Secret clearance from another U.S. government agency at the time of hire, as well as the ability to obtain and maintain SCI access. External applicants selected must pass a post-offer, pre-employment drug test. Depending on duties, work in Limited Areas may restrict possession of personal or laboratory mobile and other wireless devices.

Requirements

Active DOE Q-level clearance or active Top Secret clearance issued by another U.S. government agency at the time of hire.
Ability to obtain and maintain Sensitive Compartmented Information (SCI) access.
Bachelor's degree in Computer Science, Computer and Network Security, Engineering, Business, Information Systems, or a related field.
Experience with cloud computing environments and/or artificial intelligence, including large language models (LLMs), their security considerations, implementation, and practical applications.
Advanced knowledge of cyber tools for auditing, compliance verification, vulnerability testing, and continuous system monitoring.
Significant experience setting priorities and solving complex problems in a fast-paced, customer-focused team environment.
Advanced knowledge of computer security principles, practices, and procedures, with experience independently analyzing complex cybersecurity risks and developing technically sound solutions.
Ability to work in a dynamic technical team environment with competing priorities and meet deadlines important to project success.
Ability to approach difficult problems with enthusiasm and creativity and change focus when necessary.
Advanced verbal and written communication skills to collaborate with multidisciplinary teams, influence technical decisions, and document, present, and explain complex cybersecurity risks, findings, and recommendations.
External applicants selected must pass a post-offer, pre-employment drug test.
At the SES.4 level, expert experience providing strategic technical leadership on highly complex, ambiguous cybersecurity challenges with significant organizational or programmatic impact; integrating conflicting requirements to establish innovative, risk-informed solutions, technical direction, and long-term security approaches.
At the SES.4 level, expert communication skills and experience providing strategic technical advice to senior management, sponsors, and multidisciplinary teams and influencing consequential cybersecurity decisions.
At the SES.4 level, subject-matter expertise interpreting and implementing DOE, DoD, and Intelligence Community security policies and requirements in classified environments to support system authorization and ongoing security compliance.

Nice To Haves

Professional IT/Cyber certification, such as CISSP, CISM, or a SANS Certification.

Responsibilities

Serve as the ISSE and author and owner of comprehensive cybersecurity document packages.
Plan, design, and evaluate complex cybersecurity solutions.
Perform vulnerability remediation, audit computer logs, and create documentation on policies, procedures, test plans, and risk analyses.
Inspect information systems to verify compliance and work with system administrators to maintain security and accreditation status.
Collaborate with customers on the design of computing environments and security-management processes.
Research solutions and manage cybersecurity projects with diverse scope across multiple environments.
Maintain cybersecurity tools, manage security plans and component configurations, and lead incident response and large-scale computer security projects.
At the SES.4 level, partner with the FIE Cyber Manager to collaborate and negotiate with internal and external stakeholders to identify, prioritize, and oversee implementation of security solutions.
At the SES.4 level, provide security-architecture guidance and oversight to ensure systems comply with LLNL, DOE, and customer requirements and meet programmatic risk and authorization objectives.
At the SES.4 level, establish priorities, allocate resources, manage schedules, and deliver complex cybersecurity projects within cost and time constraints.
Perform other duties as assigned.