Cybersecurity Engineer (Remote)

About the role

NLR, the National Laboratory of the Rockies, is hiring a Cybersecurity Engineer for a regular, fully remote position of 40 hours per week. The role covers the management, tuning and deployment of cybersecurity tools and environments, and leads projects that improve the effectiveness of the laboratory's cybersecurity program.

Key responsibilities

• Manage, troubleshoot and tune cybersecurity tools and sensors such as SIEM, SOAR, analysis, enrichment, alerting and forensic data retention systems.
• Select, test, deploy and tune on-premises and cloud-based environments supporting infrastructure visibility, analysis, automation and secure data retention.
• Guide policy decisions and manage security policies and configurations for firewalls, EDR suites, vulnerability scanners and cloud monitoring and incident response tools.
• Develop workflows, integrations and automated tasks that help cybersecurity personnel get the most from existing tools.
• Lead, design and run infrastructure, application and network tests and exercises to evaluate security defenses.
• Lead IT services project teams integrating network and endpoint security products with enrichment, analysis and system management tools.
• Create and maintain architectural documentation and operational procedures for cybersecurity tools and environments.
• Lead projects that improve the cybersecurity program, including workflow improvements, automation, tool enhancements, strategic initiatives and user awareness training.

Required profile

• Bachelor's degree with 9+ years of experience, or Master's degree with 7+ years, or PhD with 4+ years, or equivalent education and experience.
• Extensive IS expertise in a specific field and knowledge of related disciplines.
• Ability to evaluate hardware, software and systems tools and make procurement recommendations.
• Excellent leadership and project management skills, and strong analytical and problem-solving abilities.
• Must obtain and maintain a DOE L/Q security clearance; U.S. citizenship is required except in very limited cases.
• Preferred: at least seven years in a security engineering role, and security certifications such as GIAC (SANS), Security+, CISSP.

Required skills

• Splunk administration (required).
• Preferred: Splunk SIEM and Cortex XSOAR (formerly Demisto).
• Preferred: Windows and Linux administration, TCP/IP networking, Bash, network protocols, defense-in-depth, and scripting (e.g., Python) for security orchestration and automation.

What we offer

• Annual salary range of $83,600-$150,500 (IT Professional III) or $100,400-$180,700 (IT Professional IV), depending on profile.
• Medical, dental and vision insurance, short- and long-term disability, pension, 403(b) savings plan with employer match, AD&D insurance, PTO, sick leave, paid holidays and tuition reimbursement.
• Some positions may be eligible for relocation expense reimbursement.