Cybersecurity GRC Engineer

X-Energy • Rockville, MD

2d • $112,500 - $128,250 • Remote

About The Position

This position implements and maintains cybersecurity Governance, Risk, and Compliance (GRC) practices in support of nuclear facility design and engineering, with a focus on the Xe-100 advanced nuclear reactor. The role integrates cybersecurity requirements, risk management, and regulatory compliance into the design, development, and assessment of plant Information Technology (IT) and Operational Technology (OT) systems. The successful candidate applies knowledge of nuclear industry cybersecurity requirements and regulatory frameworks to support cybersecurity assessments, identify and mitigate risks, evaluate compliance with applicable standards, and collaborate with plant design and engineering teams to incorporate cybersecurity controls throughout the plant lifecycle.

The position also performs advanced threat hunting, develops threat intelligence, identifies and remediates control weaknesses, and conducts technical risk assessments. It requires experience with cybersecurity platforms and tools, ServiceNow development and architecture, cloud technologies, identity and access management, networking, and cybersecurity tool integration. The position is remote eligible, based at the listed Gaithersburg, Maryland location, with 10% travel to offices or sites. Regular hours are 8:00 a.m.–5:00 p.m., Monday through Friday.

Requirements

• High school diploma or equivalent.
• Typically, five years of experience in a cybersecurity role.
• Knowledge of ServiceNow platform capabilities, modules, and best practices.
• Experience in ServiceNow development and architecture.
• Familiarity with ITIL processes and service-management principles.
• Technical skills including scripting, workflow configuration, and business-rule development.
• Ability to independently design and lead complex user interfaces, integrations, and workflows.
• Proficiency in JavaScript, AngularJS, HTML, CSS, and ServiceNow Glide API.
• Knowledge and experience managing cybersecurity tools such as NDR, EDR, and SIEM.
• Experience with Azure and AWS.
• At least one of the following qualifications: CISSP, CISA, GIAC certification, GCIH, GPEN, GICSP, or equivalent.
• Knowledge of identity and access management technologies, including federation, multi-factor authentication (MFA), and public key infrastructure (PKI).
• Knowledge of cloud technologies including AWS, Azure, Docker, Kubernetes, and DevSecOps.
• Knowledge of networking, firewalls, and software-defined networking.
• Experience integrating cybersecurity tools to support an enterprise-level cybersecurity program.
• Knowledge or experience leveraging artificial intelligence (AI), machine learning (ML), and orchestration to secure the environment.

Responsibilities

• Execute advanced threat-hunt operations using known adversary tactics, techniques, procedures, and indicators of attack to detect adversaries.
• Develop threat intelligence to detect, respond to, and defeat advanced persistent threats (APTs).
• Develop and produce reports on activities and incidents to maintain day-to-day status, report trends, and provide focus and situational awareness.
• Identify and remediate control weaknesses.
• Review data with firewall administrators, engineering, system administrators, and other appropriate groups to determine the risk of security events.
• Perform complex, senior-level information security analysis.
• Develop and recommend plans to safeguard computer, server, and network configurations and data files against accidental or unauthorized modification, destruction, or disclosure, and to meet emergency data-processing needs.
• Execute and review technical risk assessments and assessments of new and existing applications.
• Develop and implement systems and procedures to prevent, detect, contain, and correct data security breaches.
• Perform other duties as assigned by the manager.

Benefits

• 401K plan with employer match
• Medical, dental, and vision insurance
• Life and disability insurance
• Paid time off
• Tuition reimbursement and professional development policy supporting continuing education

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: High school or GED