Cybersecurity Engineering I/II

About the role

The National Laboratory of the Rockies (NLR) seeks a Cybersecurity Engineer to join the Computational Science Center (CSC) Advanced Computing Operations (ACO) group. This role involves ensuring information security is built into and maintained for systems deployed in and by the laboratory's ACO.

Responsibilities

• Build and maintain security posture for systems deployed in and by the laboratory's ACO, spanning AWS, HPC, OpenStack, and purpose-built environments.
• Script and automate controls, produce security artifacts, and monitor vulnerabilities across servers, networks, web applications, and cloud services.
• Collaborate with developers, researchers, and system administrators to ensure appropriate security controls are considered at every stage of a project.
• Implement and harden security controls across heterogeneous environments; configure platform/security guardrails and verify enforcement.
• Script and automate security tasks using Bash and Python to meet control requirements (e.g., log collection, config checks, patch workflows).
• Monitor vulnerabilities and coordinate remediation with engineering teams across multiple platforms (servers, networks, web apps, cloud).
• Analyze logs using SIEM/log tools and produce meaningful reporting for stakeholders.
• Implement new capabilities required by DOE to enhance cybersecurity on ACO-managed systems.
• Partner closely with NLR Cyber Security, HPC Operations SAs, and Cloud Engineers; communicate clearly and confidently across diverse user and stakeholder groups.

Requirements

• Relevant Bachelor's Degree or equivalent relevant education/experience.
• Or, relevant Master's Degree or equivalent relevant education/experience.
• General knowledge and application of standards, principles, concepts and techniques in cybersecurity; general knowledge of related IS disciplines.
• Awareness of common threats, vulnerabilities, and attack vectors.
• Basic knowledge of incident response practices (identify, contain, mitigate).
• Effective communication (written and verbal), analytical mindset, and problem-solving skills.

Qualifications

• UNIX/Linux experience (administration, troubleshooting).
• Basic programming and/or maintenance ability with various computer software programs and information systems.
• Basic knowledge of security tools (IDS/IPS, firewalls, vulnerability scanners).
• Basic networking fundamentals (TCP/IP, DNS, common protocols).
• Basic understanding of encryption/cryptography (SSL/TLS, key management).
• Basic knowledge of access control & identity management.

Skills

• Skilled in analytical techniques and problem solving.
• Skilled in oral and written communication.
• Intermediate programming ability with various software programs and information systems.
• Strong leadership and project management skills; drive small initiatives.
• Complete understanding and wide application of principles, concepts, and techniques in cybersecurity.
• Experience implementing security controls across heterogeneous platforms (HPC, on-prem/virtualized, applications).
• Experience maintaining compliance with NIST SP 800-53 and FIPS 199.

Benefits

• Medical, dental, and vision insurance.
• Short- and long-term disability insurance.
• Pension benefits.
• 403(b) Employee Savings Plan with employer match.
• Life and accidental death and dismemberment (AD&D) insurance.
• Personal time off (PTO) and sick leave.
• Paid holidays.
• Tuition reimbursement.