Security Researcher

Description

The company is hiring a Security Researcher to help build techniques and tools for red teaming that protect critical infrastructure and federal networks. You will work on moderately complex to complex security research and red team projects, creating and using new methods to imitate how cyber adversaries behave and building tools that defend critical U.S. infrastructure and networks. Your work will advance cyber capabilities, threat analysis, and mitigation strategies for operational technology and industrial control systems.

The role sits programmatically in the Strategic Threat Analysis and Response organization and administratively in the Global Security Computing Applications Division within the Computing Directorate. It can be filled at either of two levels, depending on the knowledge and related experience the hiring team finds. Extra duties listed below apply if you are hired at the higher level.

Responsibilities

• Find vulnerabilities in software, firmware, and operational technology systems for research projects, using creative and automated approaches.
• Help set technical requirements for red team operations, penetration testing, and adversary simulation at the lab.
• Analyze software, firmware, and malware with limited direction to find weaknesses, malicious behavior, and likely attack paths, and build repeatable workflows for red team engagements.
• Analyze source code, binaries, and firmware to find vulnerabilities and support building proof-of-concept exploits and mitigations.
• Take part in designing and implementing vulnerability assessment, penetration testing, and adversary emulation methods that improve understanding and mitigation of threats to operational technology.
• Track emerging threats and new opportunities to strengthen cyber defense and red team capabilities.
• Work with sponsors and stakeholders on program growth, research proposals, and alignment with mission goals.
• Help develop and carry out new approaches that meet sponsor and project needs as the threat landscape changes quickly.
• Work with team members and contribute your technical expertise to project and program activities.
• Take on other duties as assigned.
• At the SES.3 level, you will also guide complex technical projects and help set research direction, project planning, and technical strategy.
• At the SES.3 level, you will solve difficult cybersecurity problems and turn ideas into working tools or software.
• At the SES.3 level, you will help shape technical approaches, requirements, and project goals as lab and sponsor needs change.
• At the SES.3 level, you will engage project teams and external stakeholders to move cybersecurity research and capabilities forward.

Requirements

• You must be able to hold a U.S. DOE Q-level security clearance, which requires U.S. citizenship.
• A bachelor's degree with a strong focus in cybersecurity, computer science, information technology, computer engineering, or a related technical field, or an equivalent mix of education and related experience.
• Broad experience analyzing source code, binaries, or firmware.
• Broad experience with hardware or software debuggers, static disassemblers and decompilers such as IDA Pro, common binary file formats, dynamic analysis tools, software bills of materials, and network analysis tools.
• Broad experience sharing technical information across multidisciplinary teams and with non-cyber experts, and working well in a team.
• Thorough knowledge of current red teaming and penetration testing technologies.
• Strong analytical, problem-solving, and decision-making skills for building creative solutions to moderately complex to complex problems.
• Ability to juggle several technical tasks with competing priorities, approach hard problems with enthusiasm and creativity, and change focus when needed.
• Strong verbal and written communication skills for working in a team and explaining technical information to multidisciplinary teams and non-cyber experts.
• At the SES.3 level, you also need advanced experience on complex cybersecurity research projects, applying technical methods to hard problems.
• At the SES.3 level, you must work independently on assigned technical tasks while managing competing priorities and adapting to changing requirements.
• At the SES.3 level, you need advanced experience communicating technical concepts, working across disciplines, and supporting project planning or research proposals.
• At the SES.3 level, you need advanced knowledge of one or more specialized areas, such as instruction set architectures, reverse engineering, firmware analysis and extraction, or operational technology implementation.
• At the SES.3 level, a master's or PhD with a strong focus in cybersecurity, computer science, information technology, computer engineering, or a related technical field is required.
• At the SES.3 level, you need knowledge of one or more of these areas: embedded systems, scientific data analysis, machine learning, systems programming, software engineering, formal verification methods, and high-performance computing.
• At the SES.3 level, experience with industrial control systems software and hardware is needed.
• At the SES.3 level, experience contributing to research proposals, sponsor engagements, or funding opportunities is needed.
• At the SES.3 level, experience working at the Department of Energy, Department of Homeland Security, Department of Defense, a utility, a manufacturing or hardware/software company, or a cybersecurity firm is needed.

Conditions

Salary is $146,340 to $222,564 per year.

At the SES.2 level, salary is $146,340 to $185,544 per year.

At the SES.3 level, salary is $175,530 to $222,564 per year.

This is the lowest to highest salary the company in good faith expects to pay for this role at the time of posting. Pay will never fall below any applicable local minimum wage. Where you land in the range depends on factors such as specific competencies, education, qualifications, certifications, experience, skills, seniority, geographic location, performance, and business or organizational needs.

The role is onsite. It is a career indefinite or at-will appointment, and lab employees and external candidates may both be considered.

The position requires a DOE Q-level clearance. If selected, you will go through a federal background investigation to determine eligibility for access to classified information or matter. All L- or Q-cleared employees are subject to random drug testing, and Q-level clearance requires U.S. citizenship.

External candidates selected must pass a post-offer, pre-employment drug test, which includes testing for marijuana because federal law applies as the company is a federal contractor.

Under DOE rules, mobile devices are restricted in Limited Areas. Depending on your duties, you may need to work in a Limited Area where you cannot carry a personal or laboratory mobile device. This covers cell phones, tablets, fitness devices, wireless headphones, and other Bluetooth or wireless devices.

If you use a medical device that pairs with a mobile device, you must still follow the mobile device rules in each Limited Area section. Sensitive Compartmented Information Facilities need separate approval. Hearing aids without wireless, or with wireless disabled, are allowed in Limited Areas, Secure Space, and Transit or Buffer Space inside buildings.

Flexible schedules are available depending on project needs.

Benefits

• Flexible benefits package.
• 401(k).
• Relocation assistance.
• Education reimbursement program.
• Recognized as one of the 2026 Best Places to Work by Glassdoor.