{"id":1337296,"url":"https://alion.io/job/nlr-adversarial-cybersecurity-researcher","title":"Adversarial Cybersecurity Researcher","company":{"id":1756652,"name":"NLR","domain":"nlr.gov","url":"https://alion.io/company/nlr-gov","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":91,"open_postings":6,"ghost_share":0,"stale_share":0.167,"repost_share":0,"time_to_fill_p50_days":60,"computed_at":"2026-10-19T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Golden, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":132000,"max_usd":262000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":376},"experience_years_min":9,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Digital Twin","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Threat Modeling","optional":false},{"name":"C++","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-05-22T00:00:00Z","employer_posted_date":"2026-05-22","last_verified_at":"2026-10-19T04:20:32Z","board_verified":true,"closed_at":null,"days_open":150,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":150},"description":"Posting Title\nAdversarial Cybersecurity Researcher.\nLocation\nCO - Golden.\nPosition Type\nRegular.\nHours Per Week\n40.\nWorking at NLR\nNLR is located at the foothills of the Rocky Mountains in Golden, Colorado is the nation's primary laboratory for energy systems research and development.Join the National Laboratory of the Rockies (NLR), where world-class scientists, engineers, and experts are accelerating energy innovation through breakthrough research and systems integration. From our mission to our collaborative culture, NLR stands out in the research community for its commitment to an affordable and secure energy future. Spanning foundational science to applied systems engineering and analysis, we focus on solving complex challenges to deliver advanced, secure, reliable, and cost-effective energy solutions. Our work helps strengthen U.S. industries, support job creation, and promote national economic growth.\nAt NLR, you'll find a mission-driven environment supported by state-of-the-art facilities, multidisciplinary research teams, and strong collaborations with industry, academia, and other national laboratories. We offer robust professional development opportunities, and a competitive benefits package designed to support your career and well-being.\nJob Description\nNLR is seeking a mid-career Adversarial Cyber Researcher to join its Cybersecurity Research Center (CRC). The CRC conducts applied research at the intersection of cybersecurity, energy systems, and national resilience-developing the tools, methods, and scientific foundations necessary to secure and sustain the nation’s evolving energy infrastructure.\nCRC research spans threat actor modeling and simulation, operational technology (OT) risk analysis, adversarial experimentation, hardware and software assurance, supply chain integrity, and cyber-physical resilience testing. Working across NLR’s energy, grid, and systems integration missions, the CRC leverages unique laboratory assets-including the ARIES Cyber Range-to conduct large-scale, high-fidelity cybersecurity experiments and modeling.\nWe are seeking a technically strong and research-focused professional to contribute to cyber adversarial science, threat emulation, and defense experimentation. The successful candidate will possess a deep understanding of offensive and defensive cybersecurity methodologies, hands-on experience designing and conducting controlled adversarial experiments, and a demonstrated ability to translate experimental results into models, tools, and research insights that advance cyber-physical system resilience.\nKey Research Responsibilities:\nResearcher IV (Senior Researcher, Team/Project Leadership)\nLead adversarial research initiatives targeting energy sector systems, including threat emulation, cyber range experimentation, and model-based simulation, defining experimental objectives and strategies.\nIndependently design, execute, and evaluate complex adversary-defender studies, including multi-stage attack-chain modeling, vulnerability exploration, and defense validation, ensuring reproducible and rigorous research outcomes.\nLead development and validation of cybersecurity research tools, simulation frameworks, and automation scripts, ensuring integration with multiple projects and broader laboratory initiatives.\nExtend and operationalize threat modeling methodologies (e.g., MITRE ATT&CK, ATT&CK for ICS) for large-scale experimental design and system-level defense evaluation.\nIntegrate research outcomes into system-level risk, resilience models, and quantitative performance metrics, influencing laboratory-wide strategies and priorities.\nConduct advanced adversarial analysis and vulnerability assessments of IT, OT, and hybrid energy systems, producing insights for architecture improvement and defense strategies.\nLead the preparation of research proposals, technical publications, and conference presentations, shaping research directions and laboratory reputation in the field.\nDrive interdisciplinary collaboration across power systems, controls, and modeling teams, bridging cyber-physical domains and guiding project execution.\nSupport and expand NLR’s adversarial research infrastructure, including cyber ranges, digital twins, and experiment orchestration frameworks, through leadership and mentorship.\nMentor and guide junior and mid-level researchers, promoting professional development, fostering a positive research culture, and building laboratory-wide capability in adversarial modeling and defense research.\nResearcher III\nConduct adversarial research on energy sector systems, including threat emulation, cyber range experimentation, and model-based simulation, with guidance from senior researchers.\nDesign, execute, and evaluate controlled adversary-defender studies, such as attack-chain modeling, vulnerability exploration, and defense validation experiments, contributing to reproducible research outputs.\nDevelop and validate cybersecurity research tools, simulation frameworks, and automation scripts to support quantitative analysis of cyber-physical dynamics.\nApply and extend threat modeling methodologies (e.g., MITRE ATT&CK, ATT&CK for ICS) to inform experimental design and system-level defense evaluation.\nIntegrate research outcomes into system-level risk and resilience models, simulation environments, and performance metrics, under supervision as needed.\nConduct adversarial analysis and vulnerability assessments of IT, OT, and hybrid energy systems, identifying insights for defense design improvements.\nContribute to research proposals, technical publications, and conference presentations, supporting team-level advancement of cybersecurity science.\nCollaborate with interdisciplinary teams in power systems, controls, and modeling to bridge cyber and physical domains in experiments and model development.\nSupport the growth of NLR’s adversarial research infrastructure, including cyber ranges, digital twins, and experiment orchestration frameworks, through direct contributions and process improvement.\nProvide mentorship to junior staff, including interns or early-career researchers, supporting skill development and laboratory capabilities.\n.\nBasic Qualifications\nResearcher IVRelevant PhD and 4 or more years of experience . Or, relevant Master's Degree and 7 or more years of experience . Or, relevant Bachelor's Degree and 9 or more years of experience . Demonstrated in-depth knowledge of laws, regulations, principles, procedures and practices related to specific field. Excellent leadership, communication, problem solving and project management skills. Ability to use various computer software programs.\nResearcher III\nRelevant PhD. Or, relevant Master's Degree and 3 or more years of experience. Or, relevant Bachelor's Degree and 5 or more years of experience . Demonstrates broad understanding and wide application of engineering technical procedures, principles, theories and concepts in the field. General knowledge of other related disciplines. Demonstrates leadership in one or more areas of team, task or project lead responsibilities. Demonstrated experience in management of projects. Very good writing, interpersonal and communication skills.\n* Must meet educational requirements prior to employment start date.\nAdditional Required Qualifications\nMust be able to obtain and maintain a DOE security clearance at the Q/TS/SCI level. A polygraph may be required. Eligibility requirements: To obtain a clearance, an individual must be at least 18 years of age; U.S. citizenship is required except in very limited circumstances. See DOE O 472.2A for additional information.\nUnderstanding and application of project management principles, concepts, practices, and standards\nAbility to travel as needed up to 25%\nPreferred Qualifications\nResearcher IV\nProven leadership in offensive cybersecurity research, including planning and executing complex experiments with strategic impact.\n\nDeep expertise in cyber modeling and simulation for applied R&D, including digital twins, discrete-event simulation, and hardware-in-the-loop testbeds.\n\nAdvanced proficiency in Python, PowerShell, C/C++, or other languages, enabling automation, data-driven analysis, and modeling integration across projects.\n\nExpert-level knowledge of ICS, OT, and energy sector systems, including protocols, architectures, and security considerations.\n\nDemonstrated ability to lead reproducible cyber experiments, applying scientific rigor and guiding project teams in methodology, analysis, and validation.\n\nEstablished record of publications, technical reports, and funded proposals, with experience translating findings into actionable outcomes for sponsors.\n\nExcellent communication, presentation, and stakeholder engagement skills, influencing cross-disciplinary teams and external partners.\n\nDemonstrated ability to independently lead projects, mentor junior staff, and develop laboratory-wide adversarial research capabilities.\n\nResearcher III\nDemonstrated experience conducting offensive cybersecurity research, including penetration testing, exploit development, threat emulation, or vulnerability analysis, with an applied understanding of defensive evaluation.\n\nWorking knowledge of cyber modeling and simulation approaches, including digital twins, discrete-event simulation, and hardware-in-the-loop testbeds for energy systems.\n\nProficiency in Python, PowerShell, C/C++, or other scripting/programming languages to support experiments, data analytics, and modeling workflows.\n\nApplied understanding of ICS, OT, and energy sector architectures, including communication protocols and configurations.\n\nAbility to design and execute reproducible cyber experiments, applying scientific rigor to data collection, analysis, and validation.\n\nContributed to peer-reviewed publications, technical reports, and sponsored research proposals.\n\nStrong technical writing and presentation skills, capable of communicating results to internal and external stakeholders.\n\nAbility to work independently and collaboratively across multiple projects, contributing to mission-driven research.\n\nInterest in mentoring junior staff and supporting team development.\n\n.\nJob Application Submission Window\nThe anticipated closing window for application submission is up to 30 days and may be extended as needed.\nAnnual Salary Range (based on full-time 40 hours per week)\nJob Profile: Researcher IV / Annual Salary Range: $120,400 - $216,700Job Profile: Researcher III / Annual Salary Range: $100,400 - $180,700NLR takes into consideration a candidate’s education, training, and experience, expected quality and quantity of work, required travel (if any), external market and internal value, including seniority and merit systems, and internal pay alignment when determining the salary level for potential new employees. In compliance with the Colorado Equal Pay for Equal Work Act, a potential new employee’s salary history will not be used in compensation decisions.\nBenefits Summary\nBenefits include medical, dental, and vision insurance; short*- and long-term disability insurance; pension benefits*; 403(b) Employee Savings Plan with employer match*; life and accidental death and dismemberment (AD&D) insurance; personal time off (PTO) and sick leave; paid holidays; and tuition reimbursement*. NLR employees may be eligible for, but are not guaranteed, performance-, merit-, and achievement- based awards that include a monetary component. Some positions may be eligible for relocation expense reimbursement. Limited-term positions are not eligible for long-term disability or tuition reimbursement.* Based on eligibility rules\nBadging Requirement\nNLR is subject to Department of Energy (DOE) access restrictions. All employees must also be able to obtain and maintain a federal Personal Identity Verification (PIV) card as required by Homeland Security Presidential Directive 12 (HSPD-12), which includes a favorable background investigation.Drug Free Workplace\nNLR is committed to...","description_format":"text","description_chars":13618,"description_truncated":true,"requirements":{"experience_years_min":9,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Professional development","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["Cybersecurity","Information Security","Energy & Utilities","Research Institutes"],"lifecycle":[{"event":"open","at":"2026-09-27T14:43:42Z"}],"visa":[],"liveness":{"score":17,"band":"cold","label":"Long shot","p_open":1,"p_active":0.618,"p_room":0.28,"age_days":150,"expected_fill_days":60,"reasons":["conf:1","velocity","win:tail","crowd:"],"computed_at":"2026-10-19T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/nlr-adversarial-cybersecurity-researcher","json_url":"https://alion.io/job/nlr-adversarial-cybersecurity-researcher.json","meta":{"generated_at":"2026-10-19T18:18:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14154,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-20T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1756652},"rest":"https://alion.io/mcp/rest/get_company?id=1756652"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnlr-adversarial-cybersecurity-researcher"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnlr-adversarial-cybersecurity-researcher"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnlr-adversarial-cybersecurity-researcher"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nlr-adversarial-cybersecurity-researcher\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnlr-adversarial-cybersecurity-researcher"}]}