Graduate (Summer) Intern - Cybersecurity Research

Graduate (Summer) Intern - Cybersecurity Research

CO - Golden

Intern (Fixed Term)

40

Join a team of world-class scientists, engineers, and visionaries dedicated to shaping the world's energy future through cutting-edge research and innovation. From our vision to our NREL community, we are unique in the research community. We are focused on impact. From our work in basic sciences to systems engineering, analysis, demonstration, and deployment, we are focused on solving market-relevant problems that result in advanced, secure, reliable, and affordable energy systems. We are trusted clean energy leaders, developing cost-saving solutions that make U.S. industries more competitive, and support job creation and economic growth across rural and urban communities.

At NREL, we offer a unique, mission-driven work environment with cutting-edge facilities and multidisciplinary research teams. NREL's environment offers strong partnerships with industry, academia, and other national laboratories, as well as professional development opportunities and a competitive benefits package for employees.

NREL's internship program aims to bridge gaps in education, research, and public service to create career pathways for students to deliver collaborative research opportunities. This is a summer program that provides undergraduate and graduate students a unique introduction to hands-on research for future energy systems.

This internship opportunity supports research efforts within the Cybersecurity Research Center (CRC). The CRC works to secure the energy transformation by leading cutting-edge, impactful cybersecurity research that enables scalable and quantifiable cyber risk reduction for future energy systems. Primary objectives to realize this vision include:

• Fully understand cyber risks to help guarantee the benefits of the energy transformation
• Make cybersecurity less of an art, more of a science
• Advance cyber resilience such that failures of any part of the grid have limited consequence
• Proactively address future cyber challenges and transform them into opportunities

CRC interns contribute to cyber research in advanced energy systems across many different energy technologies, including transmission and distribution, solar, wind, EV/EVSE, etc. Research activities include but are not limited to:

• Cyber risk analysis and threat characterization of evolving energy systems
• Advanced modeling and simulation using NREL's best of breed cyber range
• Cloud security and integration
• Test and evaluation of cybersecurity technologies for modern and distributed energy systems
• Threat emulation and red teaming
• Grid and renewable energy system device analysis, including hardware and software reverse engineering, SBOM, and HBOM
• Supply chain analysis
• Cyber training and exercises
• Advanced wireless technologies for distributed energy
• AI/ML research to enhance cyber resilience of energy systems
• Formal methods research to enhance security verification and assurance for energy systems
• Cyber policy, compliance, and standards
• Data analysis, visualization, and reporting
• Performing literature reviews and background research
• Publishing research results in reputable conferences or journals

Must be enrolled as a full-time student in a Bachelor's, Master's or PhD degree program, or graduated in the past 12 months from an accredited institution. Candidates who have earned a degree may work for a period not to exceed 12 months. Must have a minimum of a 3.0 cumulative grade point average.

Please Note:

• You will need to upload official or unofficial school transcripts as part of the application process.

• If selected for position, a letter of recommendation will be required as part of the hiring process.

Candidate should be in a technical degree program, such as information security, network engineering, computer science, computer engineering, cybersecurity risk management or electrical engineering.

Candidate should be experienced in computer programming and code development, and have exposure to research technologies used for energy system cybersecurity such as:

• Containerization and virtualization
• Computer networking
• SCADA and other control system protocols
• Cyber-physical systems

Prior experience in cybersecurity, including national competitions, hackthebox, or cybersecurity-related certifications, is a major plus.

Prior work and experience in electric power, IT/OT security, software development, or significant hands-on-hardware in a laboratory or field setting is a major plus.

Knowledge and experience in grid control system software (e.g., energy management systems, engineering software, etc.) and equipment (e.g., remote terminal units, substation relays, inverters, battery energy storage systems, etc.) is a plus.

Ability to obtain and hold a security clearance is a plus.

The ideal candidate will be able to work onsite at our campus in Golden Colorado for the duration of the internship. For the right candidate the team may consider a remote work opportunity however onsite work is strongly preferred.

The anticipated closing window for application submission is up to 30 days and may be extended as needed.

Job Profile: Graduate II / Annual Salary Range: $43,700 - $69,900

NREL takes into consideration a candidate's education, training, and experience, expected quality and quantity of work, required travel (if any), external market and internal value, including seniority and merit systems, and internal pay alignment when determining the salary level for potential new employees. In compliance with the Colorado Equal Pay for Equal Work Act, a potential new employee's salary history will not be used in compensation decisions.

Benefits include medical, dental, and vision insurance; 403(b) Employee Savings Plan with employer match*; and sick leave (where required by law). NREL employees may be eligible for, but are not guaranteed, performance-, merit-, and achievement- based awards that include a monetary component. Some positions may be eligible for relocation expense reimbursement. Internships projected to be less than 20 hours per week are not eligible for medical, dental, or vision benefits.

NREL is subject to Department of Energy (DOE) access restrictions. All employees must also be able to obtain and maintain a federal Personal Identity Verification (PIV) card as required by Homeland Security Presidential Directive 12 (HSPD-12), which includes a favorable background investigation. Intern assignments extending beyond six months will be subject to this requirement.

NREL is committed to maintaining a drug-free workplace in accordance with the federal Drug-Free Workplace Act and complies with federal laws prohibiting the possession and use of illegal drugs. Under federal law, marijuana remains an illegal drug.

If you are offered employment at NREL, you must pass a pre-employment drug test prior to commencing employment. Unless prohibited by state or local law, the pre-employment drug test will include marijuana. If you test positive on the pre-employment drug test, your offer of employment may be withdrawn.

Please note that in order to be considered an applicant for any position at NREL you must submit an application form for each position for which you believe you are qualified. Applications are not kept on file for future positions. Please include a cover letter and resume with each position application.

NREL is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard basis of age (40 and over), color, disability, gender identity, genetic information, marital status, domestic partner status, military or veteran status, national origin/ancestry, race, religion, creed, sex (including pregnancy, childbirth, breastfeeding), sexual orientation, and any other applicable status protected by federal, state, or local laws.

E-Verify is a registered trademark of the U.S. Department of Homeland Security. This business uses E-Verify in its hiring practices to achieve a lawful workforce.