Cyber Vulnerability & Cloud Security Team Lead

Requisition Id 15286 

 

Overview:

We’re hiring a Cyber Vulnerability & Cloud Security Team Lead to manage vulnerability scanning, infrastructure, analysis, and remediation. The Team Lead is responsible for developing, reviewing, and updating cybersecurity platforms, automation, and integrations, while ensuring compliance with federal and industry standards. This position resides in the Cyber Enhancements group in the Cybersecurity division of the Information Technology Services Directorate at Oak Ridge National Laboratory (ORNL).

 

In this role, you’ll lead, coordinate, and develop infrastructure, automation, and management of vulnerability platforms and integrations. The Team Lead will maintain accurate records of cybersecurity activities, task tracking, and program enhancement efforts, and prepare reports for senior management. Additionally, you will administer and enhance ORNL’s vulnerability platforms and guide remediation activities.

 

Major Duties/Responsibilities:

• Manage and mentor staff, ensuring they have the training and resources to perform effectively.
• Lead ORNL’s Vulnerability Management Team across on-prem and cloud environments.
• Provide technical advice to improve cybersecurity in operations and research.
• Manage and enhance the vulnerability scanning infrastructure and program.
• Oversee vulnerability scanning, reporting, remediation, and troubleshooting.
• Support cybersecurity activities regarding intrusions, malicious activity, protective actions, and remediation on ORNL systems.
• Design and manage web application scanning capabilities.
• Perform and oversee technical analysis including log review, network flow assessment, and automation to improve vulnerability management.
• Prepare assessments, dashboards, and reports with recommendations for leadership.
• Communicate technical concepts and incident information to ORNL and DOE staff.
• Deliver ORNL’s mission by aligning behaviors, priorities, and interactions with our core values of Impact, Integrity, Teamwork, Safety, and Service. Promote equal opportunity by fostering a respectful workplace.

 

Basic Qualifications:

• A BA/BS degree in computer science, information technology, engineering, or a related discipline and a minimum of 8 years of directly aligned cybersecurity experience.
• At least 3–5 years of experience managing teams in a cybersecurity or IT environment.
• At least 3–5 years of experience leading projects or initiatives from planning through execution.
• Hands-on experience managing and implementing vulnerability scanning tools (e.g., Nessus, Burp Suite, Nexpose, Nmap).
• At least 3-5 years of experience with Agile/Scrum task management tools (e.g., Jira, ServiceNow).
• Demonstrated ability to work effectively in a team environment, including mentoring staff and collaborating across groups.
• Ability to communicate and collaborate with both technical specialists and business stakeholders.
• Strong technical acumen in core cybersecurity areas, such as log analysis, network flows, and remediation activities.
• Ability to develop scripts or automation to enhance vulnerability management and reporting.
• Master’s and PhD degree holders in the same fields are also encouraged to apply who possess the following qualifications:
  • MS degree plus a minimum of 7 years of relevant and aligned experience.
  • PhD plus a minimum of 4 years of relevant and aligned experience.

 

Preferred Qualifications:

• MS degree in computer science, IT, or a related field.
• 10+ years of relevant experience.
• Security industry certifications (e.g., GCIA, GCIH).
• Advanced understanding of Linux, Unix, Mac, and Windows operating systems.
• Experience with business strategy, process improvement, and operational metrics.
• Experience planning, developing, or integrating SOAR with SIEM.
• Familiarity with UEBA platforms.
• Experience collaborating with research organizations to develop or enhance cyber capabilities.
• Experience working in DOE facilities, other government entities, or large-scale research environments.
• Project ma