ICS / OT Cyber Security Engineer

X-energy • Rockville, MD

1d • $125,000 - $142,500 • Remote

About The Position

This position develops and executes cybersecurity engineering strategies and activities in support of plant design and engineering teams. It integrates cybersecurity principles into the design of plant information and operational technology systems, implements and assesses cybersecurity systems, supports cybersecurity assessments of Xe-100 systems, and recommends solutions to cybersecurity issues. Candidates must have a background in industrial control systems and/or operational technologies supporting nuclear, heavy utilities, or manufacturing.

The role also performs advanced threat hunting, develops threat intelligence, assesses security risks and applications, identifies and remediates control weaknesses, and develops safeguards and procedures to prevent, detect, contain, and correct data security breaches. The position is Level III, full-time, exempt, and remote eligible, with a listed worksite in Gaithersburg, Maryland. Travel to offices or sites is 10%.

Requirements

• High school diploma or equivalent.
• Typically, five or more years of progressive experience in cybersecurity, network security, or a related field for Level III.
• In-depth knowledge of OT cybersecurity architecture supporting components of the NIST Cybersecurity Framework, including cybersecurity engineering, vulnerability management, identity management, threat intelligence, prediction and detection, and response and recovery.
• Knowledge of ServiceNow platform capabilities, modules, and best practices.
• Experience in ServiceNow development and architecture.
• Familiarity with ITIL processes and service management principles.
• Technical skills in scripting, workflow configuration, and business rule development.
• Ability to independently design and lead complex user interfaces, integrations, and workflows.
• Proficiency in JavaScript, AngularJS, HTML, CSS, and the ServiceNow Glide API.
• Background in industrial control systems and/or operational technologies supporting nuclear, heavy utilities, or manufacturing.

Responsibilities

• Execute advanced threat-hunt operations using known adversary tactics, techniques, and procedures, as well as indicators of attack, to detect adversaries.
• Develop threat intelligence to detect, respond to, and defeat advanced persistent threats (APTs).
• Develop and produce reports on activities and incidents to maintain day-to-day status, report trends, and provide focus and situational awareness.
• Identify and remediate control weaknesses.
• Review data with firewall administrators, engineering, system administrators, and other appropriate groups to determine the risk of security events.
• Perform complex, senior-level information security analysis.
• Develop and recommend plans to safeguard computer, server, and network configurations and data files against accidental or unauthorized modification, destruction, or disclosure, and to meet emergency data-processing needs.
• Execute technical risk assessments and assess new and existing applications.
• Develop and implement systems and procedures to prevent, detect, contain, and correct data security breaches.
• Maintain professional demeanor and behavior in all forms of communication.
• Perform other duties as assigned by the manager.
• Develop and execute cybersecurity engineering strategies and activities in support of plant design and engineering teams.
• Integrate cybersecurity philosophy into the design of plant information and operational technology systems.
• Implement and assess cybersecurity systems, support cybersecurity assessments of Xe-100 systems, and recommend solutions to cybersecurity issues.

Benefits

• 401(k) plan with employer match
• Medical, dental, and vision insurance
• Life and disability insurance
• Paid time off
• Tuition reimbursement and professional development policy supporting continuing education

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: High school or GED