Information Security Specialist, Onsite

Sandia National Laboratories is the nation's premier science and engineering lab for national security and technology innovation, with teams of specialists focused on cutting-edge work in a broad array of areas. Some of the main reasons we love our jobs:

• Challenging work with amazing impact that contributes to security, peace, and freedom worldwide
• Extraordinary co-workers
• Some of the best tools, equipment, and research facilities in the world
• Career advancement and enrichment opportunities
• Flexible work arrangements for many positions include 9/80 (work 80 hours every two weeks, with every other Friday off) and 4/10 (work 4 ten-hour days each week) compressed workweeks, part-time work, and telecommuting (a mix of onsite work and working from home)
• Generous vacation, strong medical and other benefits, competitive 401k, learning opportunities, relocation assistance and amenities aimed at creating a solid work/life balance*

World-changing technologies. Life-changing careers. Learn more about Sandia at: http://www.sandia.gov

*These benefits vary by job classification.

Center 5400 Integrated Military Systems - is seeking an Information Security Specialist with robust expertise in security operations and Communications Security (COMSEC) to develop, maintain, and ensure compliance with comprehensive policies, processes, and procedures that protect the security of systems, communications, and information assets. This role is essential to ensuring that program operations consistently meet established standards, specifications, and agency guidelines.

The successful candidate will provide expert guidance in interpreting and applying security policies, regulatory requirements, and agency directives. Key responsibilities include conducting thorough inspections, process control analyses, and audits to verify compliance and uphold security integrity.

Serving as a primary liaison between Sandia National Laboratories and governmental and contractor agencies, the incumbent will facilitate effective communication and ensure alignment with evolving compliance requirements. The role also supports IT and cybersecurity functions, including vulnerability assessments, system security planning, risk mitigation, and compliance with accrediting agency cybersecurity frameworks such as NIST.

The primary focus of this position is the comprehensive security and compliance oversight of systems and communications in support of Center 5400s critical programs and missions, with particular emphasis on COMSEC program management.

Key responsibilities include:

• Developing, maintaining, and validating security policies, plans, processes, and procedures to ensure compliance with regulatory and agency standards.
• Conducting detailed inspections, audits, and process control analyses to enforce compliance and identify improvement opportunities.
• Providing expert interpretation of security policies and guidelines, offering strategic solutions to complex compliance challenges.
• Serving as the Primary COMSEC Custodian for the Centers COMSEC account, ensuring secure management and accountability of communications security materials.
• Designing and delivering training and awareness programs to promote compliance with applicable security regulations.
• Leading system certification and accreditation planning, testing, and coordination activities.
• Analyzing security logs and intelligence from internal and external sources to detect and respond to potential threats.
• Staying current with industry best practices, emerging threats, and evolving regulatory requirements.
• Supporting incident response efforts and contributing to the development of IT, Communication Security, and cybersecurity policies and guidance.

Due to the nature of the work, the selected applicant must be able to work onsite. This position also requires the ability to travel up to 25% of time.

$74,700 - $144,400

*Salary range is estimated, and actual salary will be determined after consideration of the selected candidate's experience and qualifications, and application of any approved geographic salary differential.

• Bachelor's degree in a relevant discipline; or an equivalent combination of directly relevant education and engineering or scientific experience that demonstrates the knowledge, skills, and ability to perform independent research and development.
• Implement, enforce, and manage COMSEC account, policies, procedures, and equipment to safeguard sensitive communications.
• Active DOE Q (or DOD equivalent) security clearance.

• Demonstrated exceptional interpersonal skills, including conflict de-escalation, adaptability, and the ability to find common ground by effectively adjusting communication style to meet the needs of diverse situations and stakeholders.
• Excellent verbal and written communication skills, with proven ability to collaborate across multidisciplinary teams, engage stakeholders, and deliver training and awareness programs.
• Extensive experience serving as a COMSEC Custodian or managing communication security programs, ensuring compliance with applicable regulations and secure handling of sensitive
• materials.Ability to interpret and apply complex security policies and regulations across classified and unclassified environments, with interdisciplinary knowledge of information security domains.
• Familiarity with policy development and application, and application of the scientific method with regard to continuous monitoring and analyzing data from information systems in support of active risk management.
• Experience with cybersecurity requirements, including developing and managing security plans, and familiarity with DOE/NNSA cybersecurity orders and standards such as NIST, ISO, and CNSS.
• Proven ability to apply security controls to information systems, conduct risk assessments, and manage vulnerabilities in accordance with industry best practices and frameworks like NIST 800-53.
• Relevant industry certifications (e.g., CISSP, CISM) and demonstrated commitment to continuous learning in emerging cybersecurity technologies and trends.
• Skilled in using monitoring tools, performance optimization, and incident response to maintain secure network environments.
• Strong understanding of secure network design, access controls, and cybersecurity platform development and certification processes.

Center 5400 Integrated Military Systems stewards and develops core technologies for advanced flight systems, aerospace precision navigation, guidance and control, target recognition and defeat, directed energy and military systems analysis.

Department 5401 provides consistency of regulatory requirements interpretation and implementation; application of minimum requirements and best practices to the Center 5400 laboratories; and to support initiatives to improve the safety and security of the centers workers and lab operations.

This posting will be open for application submissions for a minimum of three (3) calendar days, including the 'posting date'. Sandia reserves the right to extend the posting date at any time.

Position requires a Department of Energy (DOE) Q security clearance to start, or equivalent active security clearance with another U.S. government agency (e.g., DOD). Sandia is required by DOE directive to conduct a pre-employment drug test and background review that includes checks of personal references, credit, law enforcement records, and employment/education verifications. Applicants for employment need to be able to maintain a DOE Q-level security clearance, which requires U.S. citizenship. If you hold more than one citizenship (i.e., of the U.S. and another country), your ability to obtain a security clearance may be impacted.

Applicants offered employment with Sandia are subject to a federal background investigation to meet the requirements for access to classified information or matter if the duties of the position require a DOE security clearance. Substance abuse or illegal drug use, falsification of information, criminal activity, serious misconduct or other indicators of untrustworthiness can cause a clearance to be denied or terminated by DOE, resulting in the inability to perform the duties assigned and subsequent termination of employment.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status and any other protected class under state or federal law.

If you have a Medical Portable Electronic Device (MedPED), such as a pacemaker, defibrillator, drug-releasing pump, hearing aids, or diagnostic equipment and other equipment for measuring, monitoring, and recording body functions such as heartbeat and brain waves, if employed by Sandia National Laboratories you may be required to comply with NNSA security requirements for MedPEDs.

If you have a MedPED and you are selected for an on-site interview at Sandia National Laboratories, there may be additional steps necessary to ensure compliance with NNSA security requirements prior to the interview date.