Cyber Vulnerability & Cloud Security Team Lead

Requisition Id15286

Overview:

We're hiring a Cyber Vulnerability & Cloud Security Team Lead to manage vulnerability scanning, infrastructure, analysis, and remediation. The Team Lead is responsible for developing, reviewing, and updating cybersecurity platforms, automation, and integrations, while ensuring compliance with federal and industry standards. This position resides in the Cyber Enhancements group in the Cybersecurity division of the Information Technology Services Directorate at Oak Ridge National Laboratory (ORNL).

In this role, you'll lead, coordinate, and develop infrastructure, automation, and management of vulnerability platforms and integrations. The Team Lead will maintain accurate records of cybersecurity activities, task tracking, and program enhancement efforts, and prepare reports for senior management. Additionally, you will administer and enhance ORNL's vulnerability platforms and guide remediation activities.

Major Duties/Responsibilities:

• Manage and mentor staff, ensuring they have the training and resources to perform effectively.
• Lead ORNL's Vulnerability Management Team across on-prem and cloud environments.
• Provide technical advice to improve cybersecurity in operations and research.
• Manage and enhance the vulnerability scanning infrastructure and program.
• Oversee vulnerability scanning, reporting, remediation, and troubleshooting.
• Support cybersecurity activities regarding intrusions, malicious activity, protective actions, and remediation on ORNL systems.
• Design and manage web application scanning capabilities.
• Perform and oversee technical analysis including log review, network flow assessment, and automation to improve vulnerability management.
• Prepare assessments, dashboards, and reports with recommendations for leadership.
• Communicate technical concepts and incident information to ORNL and DOE staff.
• Deliver ORNL's mission by aligning behaviors, priorities, and interactions with our core values of Impact, Integrity, Teamwork, Safety, and Service. Promote equal opportunity by fostering a respectful workplace.

Basic Qualifications:

• A BA/BS degree in computer science, information technology, engineering, or a related discipline and a minimum of 8 years of directly aligned cybersecurity experience.
• At least 3-5 years of experience managing teams in a cybersecurity or IT environment.
• At least 3-5 years of experience leading projects or initiatives from planning through execution.
• Hands-on experience managing and implementing vulnerability scanning tools (e.g., Nessus, Burp Suite, Nexpose, Nmap).
• At least 3-5 years of experience with Agile/Scrum task management tools (e.g., Jira, ServiceNow).
• Demonstrated ability to work effectively in a team environment, including mentoring staff and collaborating across groups.
• Ability to communicate and collaborate with both technical specialists and business stakeholders.
• Strong technical acumen in core cybersecurity areas, such as log analysis, network flows, and remediation activities.
• Ability to develop scripts or automation to enhance vulnerability management and reporting.
• Master's and PhD degree holders in the same fields are also encouraged to apply who possess the following qualifications:
  • MS degree plus a minimum of 7 years of relevant and aligned experience.
  • PhD plus a minimum of 4 years of relevant and aligned experience.

Preferred Qualifications:

• MS degree in computer science, IT, or a related field.
• 10+ years of relevant experience.
• Security industry certifications (e.g., GCIA, GCIH).
• Advanced understanding of Linux, Unix, Mac, and Windows operating systems.
• Experience with business strategy, process improvement, and operational metrics.
• Experience planning, developing, or integrating SOAR with SIEM.
• Familiarity with UEBA platforms.
• Experience collaborating with research organizations to develop or enhance cyber capabilities.
• Experience working in DOE facilities, other government entities, or large-scale research environments.
• Project management skills with ability to lead program implementation and proof-of-value efforts.

Special Requirements:

• Q Clearance: This position requires the ability to obtain and maintain clearance from the Department of Energy. As such, this position is a Workplace Substance Abuse (WSAP) testing designated position. WSAP positions require passing a pre-placement drug test and participation in an ongoing random drug testing program.
• Visa sponsorship: Visa sponsorship is not available for this position.

Security, Credentialing, and Eligibility Requirements:

For employment at Oak Ridge National Laboratory (ORNL), a Real ID compliant form of identification will be required. Additionally, ORNL is subject to Department of Energy (DOE) access restrictions. All employees must also be able to obtain and maintain a federal Personal Identity Verification (PIV) card as mandated by Homeland Security Presidential Directive 12 (HSPD-12) and Department of Energy (DOE) Order 473.1A, which requires a favorable post-employment background investigation.

To obtain this credential, new employees must successfully complete and pass a Federal Tier 1 background check investigation. This investigation includes a declaration of illegal drug activities, including use, supply, possession, or manufacture within the last year. This includes marijuana and cannabis derivatives, which are still considered illegal under federal law, regardless of state laws.

For foreign national candidates:

If you have not resided in the U.S. for three consecutive years, you are not eligible for the PIV credential and instead will need to obtain a favorable Local Site Specific Only (LSSO) risk determination to maintain employment. Once you meet the three-year residency requirement, you will be required to obtain a PIV credential to maintain employment.

About ORNL:

As a U.S. Department of Energy (DOE) Office of Science national laboratory, ORNL has an impressive 80-year legacy of addressing the nation's most pressing challenges. Our team is made up of over 7,000 dedicated and innovative individuals! Our goal is to create an environment where a variety of perspectives and backgrounds are valued, ensuring ORNL is known as a top choice for employment. These principles are essential for supporting our broader mission to drive scientific breakthroughs and translate them into solutions for energy, environmental, and security challenges facing the nation.

ORNL offers competitive pay and benefits programs to attract and retain individuals who demonstrate exceptional work behaviors. The laboratory provides a range of employee benefits, including medical and retirement plans and flexible work hours, to support the well-being of you and your family.

Employee amenities such as on-site fitness, banking, and cafeteria facilities are also available for added convenience.

Other benefits include the following: Prescription Drug Plan, Dental Plan, Vision Plan, 401(k) Retirement Plan, Contributory Pension Plan, Life Insurance, Disability Benefits, Generous Vacation and Holidays, Parental Leave, Legal Insurance with Identity Theft Protection, Employee Assistance Plan, Flexible Spending Accounts, Health Savings Accounts, Wellness Programs, Educational Assistance, Relocation Assistance, and Employee Discounts.

If you have difficulty using the online application system or need an accommodation to apply due to a disability, please email:ORNLRecruiting@ornl.gov.

#LI-CS1

This position will remain open for a minimum of 5 days after which it will close when a qualified candidate is identified and/or hired.

We accept Word (.doc, .docx), Adobe (unsecured .pdf), Rich Text Format (.rtf), and HTML (.htm, .html) up to 5MB in size. Resumes from third party vendors will not be accepted; these resumes will be deleted and the candidates submitted will not be considered for employment.

If you have trouble applying for a position, please email ORNLRecruiting@ornl.gov.

ORNL is an equal opportunity employer. All qualified applicants, including individuals with disabilities and protected veterans, are encouraged to apply. UT-Battelle is an E-Verify employer.