Senior Security Researcher

LLNL•Livermore, CA

3d•Onsite

About The Position

Lawrence Livermore National Laboratory seeks a Senior Security Researcher to lead and support complex cybersecurity research and red-teaming projects in defense of critical infrastructure systems and Federal networks. The role develops and deploys methods to emulate cyber-adversary behavior, advance cyber capabilities, analyze threats, and develop mitigation strategies for operational technology and industrial control systems. The position is programmatically within the Strategic Threat Analysis and Response (STAR) organization and administratively within the Global Security Computing Applications Division (GS-CAD) in the Computing Directorate. It may be filled at the SES.3 or SES.4 level, based on the hiring team's assessment of knowledge and related experience; additional responsibilities apply at SES.4. The researcher leads vulnerability research and analysis across software, firmware, and operational technology; develops and implements tools and techniques for vulnerability assessment, penetration testing, and adversary emulation; and works with sponsors and stakeholders to advance mission-aligned research and program opportunities. At SES.4, the role additionally sets technical vision and strategy for a portfolio of complex work, directs technical tasks, develops innovative solutions to abstract problems, and influences major Laboratory programs and technical direction. The position requires the ability to maintain a U.S. Department of Energy Q-level security clearance, which requires U.S. citizenship. The role is a Career Indefinite or At Will appointment. Work may involve Limited Areas where personal and laboratory mobile or wireless devices are restricted, depending on job duties.

Requirements

Ability to maintain a U.S. DOE Q-level security clearance; Q-level clearance requires U.S. citizenship.
Bachelor's degree with significant focus in cybersecurity, computer science, information technology, computer engineering, or a related technical field, or an equivalent combination of education and related experience.
Significant experience leading program analysis of source code, binaries, or firmware.
Experience using hardware or software debuggers, static disassemblers and decompilers (such as IDA Pro), common binary file formats, dynamic analysis tools, software bills of materials, and/or network analysis tools.
Significant experience communicating technical information across multidisciplinary teams and to non-cyber experts, advising senior management, and collaborating effectively in a team environment.
Advanced knowledge of state-of-the-art red-teaming and penetration-testing technologies.
Advanced analytical, problem-solving, and decision-making skills for developing creative solutions to complex problems.
Ability to manage concurrent technical tasks with competing priorities, approach difficult problems with enthusiasm and creativity, and change focus when necessary.
Advanced verbal and written communication skills to collaborate and explain technical information to multidisciplinary teams and non-cyber experts, advise senior management and/or external sponsors, and strong interpersonal skills.
At SES.4, expert-level experience planning the integration and implementation of new programs and/or operational best practices.
At SES.4, expert-level project leadership and ability to apply, lead, and develop cutting-edge principles and research independently while managing concurrent technical tasks with competing priorities.
At SES.4, substantial experience creating technical direction and vision, writing research proposals, and securing sponsor funding.
At SES.4, extensive experience and knowledge in at least one of: instruction set architectures, reverse engineering intermediate languages, firmware analysis and extraction, or operational technology implementation.

Nice To Haves

Advanced degree with significant focus in cybersecurity, computer science, information technology, computer engineering, or a related technical field.
Knowledge of one or more of these disciplines: embedded systems, scientific data analysis, machine learning, systems programming, software engineering, formal verification methods, and high-performance computing.
Experience with industrial control systems software and hardware.
Ability to secure sponsor funding through successful proposals and sponsor relationships.
Previous experience working for the Department of Energy, Department of Homeland Security, Department of Defense, a utility, a manufacturing company, a hardware/software company, or a cybersecurity firm.

Responsibilities

Guide and support advanced cyber research projects using creative and automated methods to identify vulnerabilities in software, firmware, and operational technology systems.
Collaborate in developing technical requirements for red-team operations, penetration testing, and adversarial simulation capabilities at LLNL.
Analyze novel software, firmware, and malware to identify weaknesses, malicious behavior, and potential attack vectors, and create repeatable workflows for future red-team engagements.
Conduct source-code, binary, and firmware analysis to identify exploitable vulnerabilities and develop proof-of-concept exploits and mitigations.
Participate in designing and implementing tools and techniques for vulnerability assessment, penetration testing, and adversary emulation, advancing understanding and mitigation of operational-technology threats.
Identify emerging threats and opportunities to improve cyber defense and red-team capabilities, helping shape LLNL cybersecurity initiatives.
Engage sponsors and stakeholders to develop program growth opportunities, contribute to research proposals, and align work with mission objectives.
Develop and execute innovative approaches to meet sponsor and project needs in a changing threat landscape.
Mentor and collaborate with team members, using technical expertise to attract and retain projects, programs, and funding.
Perform other duties as assigned.
At SES.4, direct technical tasks across a portfolio of highly complex projects, set broad research and project vision and strategy, and influence technical direction for the Laboratory and senior management or policymakers.
At SES.4, develop innovative solutions to abstract complex problems, translate them into usable algorithms or software modules, and address problems requiring in-depth analysis and creative use of established methods.
At SES.4, develop ideas, modify approaches, redefine requirements, influence major Laboratory programs, set high-level goals, and contribute to significant advancement of knowledge.