Engineer IV, Cybersecurity

X-Energy•Rockville, MD

20h•Hybrid

About The Position

This role is responsible for developing, implementing, and maintaining key cybersecurity technologies across both X-energy corporate and TRISO fuel facility operations, including Endpoint Detection and Response (EDR), Network Detection and Response (NDR), Security Information and Event Management (SIEM), and Security Orchestration, Automation, and Response (SOAR). The position serves as a critical bridge between corporate IT infrastructure and the TRISO fuel facility, conducting software evaluations, performing architecture reviews, and identifying and addressing cybersecurity gaps between the two environments. In addition to the tooling and operations duties, this role leads structured threat modeling and cyber evaluation activities. The analyst applies established methodologies such as STRIDE to identify, categorize, and prioritize threats across systems, data flows, and trust boundaries spanning the corporate and TRISO fuel facility environments. This includes facilitating threat modeling sessions during architecture reviews and software evaluations, translating identified threats into actionable mitigations, and reassessing threat models as architectures evolve to ensure security gaps between environments are documented, tracked, and remediated. Responsibilities include conducting proactive threat hunts, monitoring endpoint and network data, collecting and analyzing digital forensic artifacts including malware, coordinating with the Xe infrastructure team, and meeting with technology vendors to evaluate solutions that support enterprise-wide security objectives.

Requirements

High school diploma required.
Basic understanding of EDR, NDR, SIEM, and SOAR technologies.
Ability to obtain and maintain a SECRET clearance or higher (U.S. citizenship required).
Typically, ten years of experience in a cybersecurity, network security, or related role required.
Certified Information Systems Security Professional (CISSP).
Direct knowledge and experience managing cybersecurity tools such as NDR, EDR, and SIEM.
Experience with Splunk.
Experience with Identity & Access Management technologies including Federation, Multi-Factor Authentication (MFA), and Public Key Infrastructure (PKI).
Experience with cloud technologies to include AWS, Azure, Docker, Kubernetes, and DevSecOps.
Experience with integration of cybersecurity tools to support an Enterprise level Cybersecurity program.
Experience leveraging Artificial Intelligence (AI), Machine Learning (ML), and Orchestration to secure the environment.

Nice To Haves

Experience working in the nuclear industry or familiarity with nuclear facility operations and regulatory requirements.
Demonstrated networking background with hands-on experience in network architecture, protocols, and security.
Experience conducting software evaluations and technology assessments to support organizational security objectives.
Exposure to DevSecOps practices, tools, and methodologies.
Experience with cloud platforms, specifically Amazon Web Services (AWS) and Microsoft Azure.
Hands-on experience with threat modeling methodologies (STRIDE or similar frameworks) and a repeatable cyber evaluation process.
Experience bridging cybersecurity programs across multiple operational environments (e.g., corporate IT and operational technology/facility systems).
Proven ability to coordinate with cross-functional infrastructure teams and engage with external vendors.
Strong written and verbal communication skills with the ability to prepare technical reports and recommendations for both technical and non-technical audiences.

Responsibilities

Design, implement, and maintain EDR, NDR, SIEM, and SOAR systems.
Configure and optimize security tools to improve detection capabilities and response times.
Conduct proactive threat hunting activities to identify potential vulnerabilities and threats.
Utilize advanced analytical techniques to uncover hidden threats within the environment.
Monitor endpoint and network data for anomalies and suspicious activities.
Analyze security alerts and incidents to determine the nature and scope of threats.
Collect and analyze digital forensic artifacts from compromised systems.
Investigate malware and conduct reverse engineering to understand threat behavior.
Collaborate with IT and security teams to improve overall security posture.
Prepare detailed reports on security incidents, findings, and recommendations for management.
Maintain professional demeanor and behavior at all times in all forms of communication.
Perform other duties as assigned by manager.
Lead the execution of the core tasks and responsibilities, listed in the Job Profile Task/Responsibilities section of this document, without close supervision and some latitude for independent judgment.
Lead the deployment of security technologies and conduct in-depth analysis of threats.
Provide feedback and guidance to more junior team members with the execution of the core tasks and responsibilities listed in the Job Profile Task/Responsibilities section of this document.
Shares knowledge related to industry best practices and standards with others across the team.