Cyber Security Engineer

Lawrence Berkeley National Laboratory has multiple openings for a Cybersecurity Engineer in Berkeley, CA.

Duties:

• Perform security duties including threat awareness, proactive network traffic analysis, incident response, forensic analysis, monitoring ticketing queue, and resolution of security incidents.
• Track security issues, and work closely with NERSC staff and end-users to advise and assist in remediation of vulnerabilities within proper timeframes.
• Support and/or lead cyber incident response activities and participate in the full incident response lifecycle.
• Maintain awareness of cybersecurity threats by monitoring a variety of information sources. Participate in 24/7 on-call rotation, occasionally working outside of scheduled hours as needed.
• Maintain existing security systems using automated tools and occasionally perform manual system administration tasks.
• Participate or lead efforts to upgrade existing systems to meet evolving needs, including the specification, purchase, and deployment of new security systems and infrastructure.
• Improve monitoring and data analysis including improvements in security data management and log analysis.
• Create, modify, and add signatures to existing IDS and security monitoring infrastructure. Promote a strong security culture through outreach and technical security consulting.
• Collaborate with system owners and application developers to assess and advise on proposed deployments, perform in-depth security reviews, and ensure cyber security best practices and policies are followed.
• Assist with developing and documenting cyber security guidance, policies, standards, and procedures.
• Secure deployment of containerized environments.
• Development and improvement of automated tools, techniques, and documentation used in existing operations.
• Security guidance and oversight in the deployment of Federated Identity and Access Management systems.
• Evaluate Edge Computing Networks and Zero Trust architectures by working with internal and external collaborators.
• Apply data modeling, visualization, machine learning, and statistical analysis techniques to large datasets from a wide range of sources in order to identify unusual and suspicious activity.

Requirements:

• Bachelor's degree in Computer Science, Cybersecurity, Mathematics or related field followed by 6 years of progressive, post-baccalaureate experience in the job offered or in a related occupation.
• Alternatively, will accept a Master's degree in Computer Science, Cybersecurity, Mathematics or related field and 4 years of experience in the job offered or in a related occupation.
• Demonstrated experience in:
  • Linux/Unix system administration;
  • Firewalls, log analysis, and network traffic analysis;
  • Security monitoring and analysis, incident response, and risk assessment;
  • Leading a project or team;
  • Leading the implementation or administration of systems;
  • Troubleshooting and solving complex issues where analysis of situations or data requires an in-depth evaluation of variable factors;
  • General cyber security principles and standards;
  • Network security and upper layer protocols;
  • Programming in C and Python;
  • Networking including OSI model and tcp/ip/udp packet inspection;
  • Hardware Maintenance;
  • Network segmentation;
  • OT asset management and critical infrastructure protection;
  • Integration of systems, processes, and organizational structures to optimize operations and enhance digital capabilities;
  • Data logging systems and the acquisition, validation, cleaning, and preparation of data; and
  • Automation of data workflows and troubleshooting data pipelines.

Additional information:

• Appointment type: This is a full-time, career appointment, exempt (monthly paid) from overtime pay.
• Salary range: The expected salary for this position is $156,864 to $191,724 depending upon the candidate's skills, knowledge, and abilities. This includes education, certifications, and years of experience.
• Background check: This position is subject to a background check. Any convictions will be evaluated to determine if they directly relate to the responsibilities and requirements of the position. Having a conviction history will not automatically disqualify an applicant from being considered for employment.
• Work modality: This position may telework. Individuals on a telework schedule must reside within 150 miles of Berkeley Lab.
• Work authorization: Candidates must be eligible to work in the U.S. at the time of hire. Visa sponsorship is not available for this position.

Want to learn more about working at Berkeley Lab? Please visit: careers.lbl.gov

Equal Employment Opportunity Employer: The foundation of Berkeley Lab is our Stewardship Values: Team Science, Service, Trust, Innovation, and Respect; and we strive to build community with these shared values and commitments. Berkeley Lab is an Equal Opportunity Employer. We heartily welcome applications from all who could contribute to the Lab's mission of leading scientific discovery, excellence, and professionalism. In support of our rich global community, all qualified applicants will be considered for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, protected veteran status, or other protected categories under State and Federal law.

Misconduct Disclosure Requirement: As a condition of employment, the finalist will be required to disclose if they are subject to any final administrative or judicial decisions within the last seven years determining that they committed any misconduct, are currently being investigated for misconduct, left a position during an investigation for alleged misconduct, or have filed an appeal with a previous employer.