ICS / OT Cyber Security Engineer

X-energy • Rockville, MD

2d • $112,500 - $128,250 • Remote

About The Position

This position develops and executes cybersecurity engineering strategies and activities in support of plant design and engineering teams. It integrates the cybersecurity philosophy into the design of plant information and operational technology systems, implements and assesses cybersecurity systems, supports cybersecurity assessments of Xe-100 systems, and recommends solutions to cybersecurity issues. Candidates must have a background in industrial control systems and/or operational technologies supporting nuclear, heavy utilities, or manufacturing.

The role performs advanced threat hunting and threat intelligence activities, evaluates and remediates security risks and control weaknesses, and develops reporting that supports operational awareness. It also performs complex information security analysis, technical risk assessments, and security planning for computer, server, and network configurations and data. The position is remote eligible, based in Gaithersburg, Maryland, with work hours of 8:00 a.m.–5:00 p.m., Monday through Friday, and travel of approximately 10% to offices or sites.

Requirements

• High school diploma or equivalent.
• Typically, five or more years of progressive experience in cybersecurity, network security, or related experience for Level III.
• Background in industrial control systems and/or operational technologies supporting nuclear, heavy utilities, or manufacturing.
• In-depth knowledge of OT cybersecurity architecture supporting NIST cybersecurity framework capabilities, including cybersecurity engineering, vulnerability management, identity management, threat intelligence, prediction and detection, response, and recovery.
• Knowledge of ServiceNow platform capabilities, modules, and best practices.
• Experience in ServiceNow development and architecture.
• Familiarity with ITIL processes and service management principles.
• Technical skills including scripting, workflow configuration, and business rule development.
• Ability to independently design and lead complex user interfaces, integrations, and workflows.
• Proficiency in JavaScript, AngularJS, HTML, CSS, and ServiceNow Glide API.

Responsibilities

• Execute advanced threat hunts using known adversary tactics, techniques, and procedures and indicators of attack to detect adversaries.
• Develop threat intelligence to detect, respond to, and defeat advanced persistent threats (APTs).
• Develop and produce reports on activities and incidents to maintain day-to-day status, report trends, and provide focus and situational awareness.
• Identify and remediate control weaknesses.
• Review data with firewall administrators, engineering, system administrators, and other appropriate groups to determine the risk of security events.
• Perform complex, senior-level information security analysis.
• Develop and recommend plans to safeguard computer, server, and network configurations and data files against accidental or unauthorized modification, destruction, or disclosure, and to meet emergency data processing needs.
• Execute and review technical risk assessments and assessments of new and existing applications.
• Develop and implement systems and procedures to prevent, detect, contain, and correct data security breaches.
• Maintain professional demeanor and behavior in all forms of communication.
• Perform other duties as assigned by the manager.

Benefits

• 401K plan with employer match
• Medical, dental, and vision insurance
• Life and disability insurance
• Paid time off
• Tuition reimbursement and professional development policy supporting continuing education

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: High school or GED