ICS / OT Cyber Security Engineer

X-Energy • Rockville, MD

1d • $112,500 - $128,250 • Remote

About The Position

This position develops and executes cybersecurity engineering strategies and activities in support of plant design and engineering teams. It integrates cybersecurity principles into the design of plant information and operational technology systems, implements and assesses cybersecurity systems, supports cybersecurity assessments of Xe-100 systems, and recommends solutions to cybersecurity issues. Candidates must have a background in industrial control systems and/or operational technologies supporting nuclear, heavy utilities, or manufacturing.

The role also performs advanced threat hunting, develops threat intelligence, assesses technical risks, identifies and remediates control weaknesses, and helps safeguard systems and data against unauthorized or accidental changes, destruction, or disclosure. The position is remote eligible, based in Gaithersburg, Maryland, with travel of 10% to offices or sites. Work hours are 8:00 a.m. to 5:00 p.m., Monday through Friday. The position is full-time and exempt.

Requirements

• High school diploma or equivalent.
• Typically, five years or more of progressive experience in cybersecurity, network security, or related experience for Level III.
• Background in industrial control systems and/or operational technologies supporting nuclear, heavy utilities, or manufacturing.
• In-depth knowledge of OT cybersecurity architecture supporting components of the NIST Cybersecurity Framework, including cybersecurity engineering, vulnerability management, identity management, threat intelligence, prediction and detection, response, and recovery.
• Knowledge of ServiceNow platform capabilities, modules, and best practices.
• Experience in ServiceNow development and architecture.
• Familiarity with ITIL processes and service management principles.
• Technical skills including scripting, workflow configuration, and business rule development.
• Ability to independently design and lead complex user interfaces, integrations, and workflows.
• Proficiency in JavaScript, AngularJS, HTML, CSS, and the ServiceNow Glide API.

Responsibilities

• Execute advanced threat-hunting operations using known adversary tactics, techniques, and procedures, as well as indicators of attack, to detect adversaries.
• Develop threat intelligence to detect, respond to, and defeat advanced persistent threats (APTs).
• Develop and produce reports on activities and incidents to maintain day-to-day status, report trends, and provide focus and situational awareness.
• Identify and remediate control weaknesses.
• Review data with firewall administrators, engineering, system administrators, and other appropriate groups to determine the risk of security events.
• Perform complex, senior-level information security analysis.
• Develop and recommend plans to safeguard computer, server, and network configurations and data files against accidental or unauthorized modification, destruction, or disclosure, and to meet emergency data-processing needs.
• Execute technical risk assessments and assessments of new and existing applications, and review their performance.
• Develop and implement systems and procedures to prevent, detect, contain, and correct data security breaches.
• Maintain professional demeanor and behavior in all forms of communication.
• Perform other duties as assigned by the manager.

Benefits

• 401K plan with employer match
• Medical, dental, and vision insurance
• Life and disability insurance
• Paid time off
• Tuition reimbursement and professional development policy supporting continuing education

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: High school or GED