The National Energy Research Scientific Computing Center (NERSC) is inviting applications for the position of
Cybersecurity Group Lead. NERSC's mission is to accelerate scientific discovery through high performance computing and data analysis for the Department of Energy (DOE) Office of Science programs. NERSC provides critical HPC and data systems and support for NERSC's 11,000+ users researching alternative energy sources, climate science, energy efficiency, environmental science and other DOE mission areas.
The NERSC Security Group Lead oversees a team of cybersecurity engineers whose role is to ensure secure access to NERSC's compute and storage resources for unclassified DOE research, balancing ease of access for users with robust security. The Cybersecurity Group is NERSC's front line in identifying, defending and responding to real and potential security incidents. The Group Lead must understand and document compliance with Lawrence Berkeley National Lab (LBNL), University of California, and DOE security requirements, and collaborate with internal and external stakeholders to strategize, implement, and maintain advanced security infrastructure and services. The Group Lead will provide guidance and propose priorities to NERSC, including the Leadership team, and support NERSC's strategic plan and goals.
You will:- Supervise and lead a team of security engineers responsible for the security architecture and infrastructure of NERSC. Participate in 24/7 on-call rotation, occasionally working outside of scheduled hours as needed, in investigating potential security issues through to resolution.
- Support NERSC's security risk management program and policy and compliance efforts, including incorporating requirements from DOE and government directives, while ensuring NERSC is able to maintain an open-science environment.
- Represent NERSC in interactions with (and presentations to) existing and prospective stakeholders.
- Collaborate effectively with peers and the Leadership team. Work with other NERSC teams to identify, explain and understand risks and advocate and architect more secure solutions.
- Lead the evaluation, development and implementation of security engineering technical and service designs and operations practices. Ensure practices are well communicated and integrated into day-to-day activities.
- Lead cross-organizational, long-term security projects supporting important deliverables, by:
- Assigning engineers and managing engineering resources for projects
- Deciding project execution and resource allocation
- Maintain an awareness of vulnerabilities, threats, and reasonable expectations of a security program by staying current on the latest news, trends, issues, tools, etc. related to cybersecurity.
- Work on and resolve significant and unique issues where analysis of situations or data requires an evaluation of intangibles.
- Represent and protect NERSC interests in all areas related to HPC cybersecurity, including (but not limited to) providing guidance and support for day-to-day operations, procurements, existing and new/evolving security technologies processes and tools (hardware and software), technical vendor management and vendor operational reviews.
- Provide effective line management for the Security team by leading recruitment and hiring efforts, mentoring, supporting professional development, giving constructive feedback and conducting performance management.
We are looking for:- Bachelor's degree in Computer Science, Engineering or related field, and 8 years of experience, and/or equivalent combination of education and experience, including a minimum of three years of experience in a lead/supervisory role related to securing a complex computer system or high performance computing data center.
- Demonstrated expertise and experience in leading, hiring, training and mentoring technical staff.
- Experience developing security policy or compliance reports.
- Demonstrated experience in developing and implementing security engineering processes and plans.
- Experience delivering presentations to senior management and/or large stakeholders.
- Strong implementation project management experience.
- A deep understanding of cybersecurity principles with a demonstrated ability to think from a risk-based perspective, operating in an environment of ambiguity.
- Able to work on multiple high-profile projects and respond to rapidly changing priorities.
- Ability to exercise independent judgment in methods, techniques, and development of evaluation criteria for obtaining results.
- Ability to work on and resolve significant and unique issues where analysis of situations or data requires an evaluation of intangibles.
- Knowledge and experience guiding complex and currently applicable security architecture, engineering, and service strategy development through to implementation and ongoing support.
- Demonstrated history of collaborating effectively across multiple stakeholders.
- Demonstrated ability to work independently, able to determine what is needed to fulfill high level outcomes and direct others.
- Excellent oral and written communication skills.
- Excellent operational skills with a focus on continuous improvement and metric-driven operations performance management.
Desired skills/knowledge:- GIAC or equivalent certifications related to cybersecurity leadership and/or management.
Additional information:- Application date: Priority consideration will be given to candidates who apply by August 8, 2026. Applications will be accepted until the job posting is removed.
- Appointment type: This is a full-time, career appointment, exempt (monthly paid) from overtime pay.
- Salary range: The expected salary for this position is $203,496 - $248,736, which fits into the full salary of $180,876 - $305,268 depending upon the candidate's skills, knowledge, and abilities. This includes education, certifications, and years of experience.
- Work modality: This position requires substantial on-site presence, but is eligible for a flexible work mode, and hybrid schedules may be considered. Hybrid work is a combination of performing work on-site at Lawrence Berkeley National Lab, 1 Cyclotron Road, Berkeley, CA and some telework. Individuals working a hybrid schedule must reside within 150 miles of Berkeley Lab. Work schedules are dependent on business needs.
- Export Control Access: This position will involve access to hardware, commodities, and technical information subject to export control regulations including, but not limited to, the Export Administration Regulations ("EAR") and/or International Traffic in Arms Regulations ("ITAR"). Accordingly, any hiring decision may depend in part on Berkeley Lab's ability to obtain or rely on federal government authorizations as required, if you are not a U.S. citizen, lawful permanent resident of the U.S. ("green card holder"), asylee, refugee, or other qualifying protected individual as defined by 8 U.S.C. 1324b(a)(3).
Want to learn more about working at Berkeley Lab? Please visit: careers.lbl.gov
