Cybersecurity Group Lead

About the role

The National Energy Research Scientific Computing Center (NERSC) is seeking a Cybersecurity Group Lead to oversee a team of cybersecurity engineers. NERSC supports DOE Office of Science programs through high-performance computing and data analysis, focusing on alternative energy sources, climate science, energy efficiency, and environmental science.

Responsibilities

• Supervise and lead a team of security engineers responsible for the security architecture and infrastructure of NERSC.
• Participate in 24/7 on-call rotation, occasionally working outside of scheduled hours to investigate potential security issues through to resolution.
• Support NERSC’s security risk management program and policy and compliance efforts, including incorporating requirements from DOE and government directives, while ensuring an open-science environment.
• Represent NERSC in interactions with (and presentations to) existing and prospective stakeholders.
• Collaborate effectively with peers and the Leadership team to identify, explain, and understand risks and advocate for more secure solutions.
• Lead the evaluation, development, and implementation of security engineering technical and service designs and operations practices, ensuring practices are well communicated and integrated into day-to-day activities.
• Lead cross-organizational, long-term security projects supporting important deliverables, by assigning engineers and managing engineering resources for projects, deciding project execution and resource allocation.
• Maintain an awareness of vulnerabilities, threats, and reasonable expectations of a security program by staying current on the latest news, trends, issues, tools, etc. related to cybersecurity.
• Work on and resolve significant and unique issues where analysis of situations or data requires an evaluation of intangibles.
• Represent and protect NERSC interests in all areas related to HPC cybersecurity, including providing guidance and support for day-to-day operations, procurements, existing and new/evolving security technologies processes and tools (hardware and software), technical vendor management and vendor operational reviews.
• Provide effective line management for the Security team by leading recruitment and hiring efforts, mentoring, supporting professional development, giving constructive feedback, and conducting performance management.

Requirements

• Bachelor’s degree in Computer Science, Engineering or related field, and 8 years of experience, and/or equivalent combination of education and experience, including a minimum of three years of experience in a lead/supervisory role related to securing a complex computer system or high performance computing data center.
• Demonstrated expertise and experience in leading, hiring, training, and mentoring technical staff.
• Experience developing security policy or compliance reports.
• Experience developing and implementing security engineering processes and plans.
• Experience delivering presentations to senior management and/or large stakeholders.
• Strong implementation project management experience.
• A deep understanding of cybersecurity principles with a demonstrated ability to think from a risk-based perspective, operating in an environment of ambiguity.
• Able to work on multiple high-profile projects and respond to rapidly changing priorities.
• Able to exercise independent judgment in methods, techniques, and development of evaluation criteria for obtaining results.
• Able to work on and resolve significant and unique issues where analysis of situations or data requires an evaluation of intangibles.
• Knowledge and experience guiding complex and currently applicable security architecture, engineering, and service strategy development through to implementation and ongoing support.
• Demonstrated history of collaborating effectively across multiple stakeholders.
• Demonstrated ability to work independently, able to determine what is needed to fulfill high level outcomes and direct others.
• Excellent oral and written communication skills.
• Excellent operational skills with a focus on continuous improvement and metric-driven operations performance management.

Qualifications

• Desired skills/knowledge: GIAC or equivalent certifications related to cybersecurity leadership and/or management.

Skills and Knowledge

• Knowledge and experience guiding complex and currently applicable security architecture, engineering, and service strategy development through to implementation and ongoing support.
• Demonstrated history of collaborating effectively across multiple stakeholders.
• Demonstrated ability to work independently, able to determine what is needed to fulfill high level outcomes and direct others.
• Excellent oral and written communication skills.
• Excellent operational skills with a focus on continuous improvement and metric-driven operations performance management.

Benefits

NERSC offers exceptional health and retirement benefits, including pension or 401K-style plans, opportunities to grow in your career, and a culture where you'll belong. Additionally, we provide parental bonding leave, pet insurance, and a Winter Holiday Shutdown each year.

Pay

The expected salary for this position is $203,496 - $248,736, which fits into the full salary range of $180,876 - $305,268 depending upon the candidate’s skills, knowledge, and abilities.

Schedule

This is a full-time, career appointment, exempt (monthly paid) from overtime pay.

Equal Opportunity Employer

BERKELEY LAB IS AN EQUAL OPPORTUNITY EMPLOYER. WE HEARTILY WELCOME APPLICATIONS FROM ALL WHO COULD CONTRIBUTE TO THE LAB'S MISSION OF LEADING SCIENTIFIC DISCOVERY, EXCELLENCE, AND PROFESSIONALISM. IN SUPPORT OF OUR RICH GLOBAL COMMUNITY, ALL QUALIFIED APPLICANTS WILL BE CONSIDERED FOR EMPLOYMENT WITHOUT REGARD TO RACE, COLOR, RELIGION, SEX, SEXUAL ORIENTATION, GENDER IDENTITY, NATIONAL ORIGIN, DISABILITY, AGE, PROTECTED VETERAN STATUS, OR OTHER PROTECTED CATEGORIES UNDER STATE AND FEDERAL LAW. MISCONDUCT DISCLOSURE REQUIREMENT: AS A CONDITION OF EMPLOYMENT, THE FINAL CANDIDATE WHO ACCEPTS AN OFFER OF EMPLOYMENT WILL BE REQUIRED TO DISCLOSE IF THEY HAVE BEEN SUBJECT TO ANY FINAL ADMINISTRATIVE OR JUDICIAL DECISIONS WITHIN THE LAST SEVEN YEARS DETERMINING THAT THEY COMMITTED ANY MISCONDUCT; OR HAVE FILED AN APPEAL OF A FINDING OF SUBSTANTIATED MISCONDUCT WITH A PREVIOUS EMPLOYER. FOR ADDITIONAL INFORMATION, CLICK HERE.