Security Researcher

LLNL•Livermore, CA

2d•$146,340 - $222,564•Onsite

About The Position

Lawrence Livermore National Laboratory is hiring a Security Researcher to develop techniques and tools for red teaming in support of defending critical infrastructure systems and Federal networks. The role contributes to cybersecurity research and red-teaming projects, applying innovative methods to emulate cyber-adversary behavior and developing tools to defend U.S. infrastructure and networks. Work supports cyber capabilities, threat analysis, and mitigation strategies for operational technology and industrial control systems. The position is programmatically within the Strategic Threat Analysis and Response (STAR) organization and administratively within the Global Security Computing Applications Division (GS-CAD) in the Computing Directorate. The role may be filled at the SES.2 or SES.3 level, depending on knowledge and experience; additional duties apply at SES.3. The researcher identifies vulnerabilities in software, firmware, and operational technology; contributes to red-team operations, penetration testing, and adversarial simulation; analyzes software, firmware, and malware; and supports vulnerability research, proof-of-concept exploits, and mitigations. The role also involves monitoring emerging threats, collaborating with sponsors and stakeholders, contributing to research proposals and program growth, and working with project teams. At SES.3, the researcher additionally guides complex technical projects and contributes to research direction, planning, technical strategy, and practical cybersecurity tools or software. This is a Career Indefinite or At Will appointment. The position requires eligibility for a DOE Q-level security clearance, which requires U.S. citizenship. Selected candidates undergo a Federal background investigation; cleared employees are subject to random drug testing, and external applicants must pass a post-offer pre-employment drug test. Depending on duties, work may occur in a Limited Area where personal and laboratory mobile or other wireless-enabled devices are restricted.

Requirements

Ability to maintain a U.S. DOE Q-level security clearance; U.S. citizenship is required for the clearance.
Bachelor’s degree with significant focus in cybersecurity, computer science, information technology, computer engineering, or a related technical field, or an equivalent combination of education and related experience.
Broad experience performing program analysis of source code, binaries, or firmware.
Broad experience using hardware or software debuggers, static disassemblers and decompilers (such as IDA Pro), common binary file formats, dynamic analysis tools, software bills of materials, and/or network analysis tools.
Broad experience communicating technical information across multidisciplinary teams and to non-cyber experts, and collaborating effectively in a team environment.
Comprehensive knowledge of state-of-the-art red-teaming and penetration-testing technologies.
Proficient analytical, problem-solving, and decision-making skills to develop creative solutions to moderately complex to complex problems.
Ability to manage concurrent technical tasks with competing priorities, approach difficult problems with enthusiasm and creativity, and change focus when necessary.
Proficient verbal and written communication skills for collaboration and explaining technical information to multidisciplinary teams and non-cyber experts.
At SES.3, advanced experience contributing to complex cybersecurity research projects and applying technical methods to challenging problems.
At SES.3, ability to work independently on assigned technical tasks while managing competing priorities and adapting to changing requirements.
At SES.3, advanced experience communicating technical concepts, collaborating across disciplines, and supporting project planning or research proposals.
At SES.3, advanced knowledge of one or more specialized areas, such as instruction set architectures, reverse engineering, firmware analysis and extraction, or operational technology implementation.

Nice To Haves

Master’s or PhD with significant focus in cybersecurity, computer science, information technology, computer engineering, or a related technical field.
Knowledge of one or more of these computer science disciplines: embedded systems, scientific data analysis, machine learning, systems programming, software engineering, formal verification methods, and high-performance computing.
Experience with industrial control systems software and hardware.
Experience contributing to research proposals, sponsor engagements, or funding opportunities.
Experience working in the Department of Energy, Department of Homeland Security, Department of Defense, a utility, manufacturing, a hardware/software company, or a cybersecurity firm.

Responsibilities

Develop and apply creative and automated methods to identify vulnerabilities in software, firmware, and operational technology systems.
Contribute to technical requirements for red-team operations, penetration testing, and adversarial simulation capabilities.
Analyze software, firmware, and malware to identify weaknesses, malicious behavior, and potential attack vectors, and develop repeatable workflows for red-team engagements.
Contribute to source-code, binary, and firmware analysis to identify vulnerabilities and support proof-of-concept exploits and mitigations.
Participate in designing and implementing vulnerability assessment, penetration-testing, and adversary-emulation techniques to improve understanding and mitigation of threats to operational technology.
Monitor emerging threats and opportunities to enhance cyber-defense and red-team capabilities.
Collaborate with sponsors and stakeholders on program growth opportunities, research proposals, and alignment with mission objectives.
Contribute to innovative approaches that meet sponsor and project needs in a rapidly evolving threat landscape.
Collaborate with team members and contribute technical expertise to project and program activities.
At SES.3, guide complex technical projects and contribute to research direction, project planning, and technical strategy.
At SES.3, develop solutions to challenging cybersecurity problems and translate concepts into practical tools or software.
At SES.3, collaborate on technical approaches, requirements, and project goals, and engage project teams and external stakeholders to advance cybersecurity research and capabilities.
Perform other duties as assigned.