IT Security Analyst

Kairos Power•Oak Ridge, TN

1d•$108,735 - $127,923

About The Position

Kairos Power is seeking an IT Security Analyst II to support the security, monitoring, and compliance of its multi-site, hybrid corporate IT infrastructure, on-premises systems, and SaaS application platforms. The role independently performs security monitoring, vulnerability management, incident response, policy and control administration, and compliance activities within established cybersecurity programs and procedures. It works with IT infrastructure teams, application owners, business teams, and external service providers to identify, assess, and remediate cybersecurity risks. The position is suited to someone with hands-on cybersecurity operations experience in a medium- or enterprise-scale environment; experience in highly regulated environments or organizations subject to NIST 800-171, CMMC, or similar frameworks is preferred. The role is based at the company’s Alameda, California headquarters for the stated salary range, and the posting also includes the tag #LI-Remote. Some travel may be required (5%). Work may involve a general office environment, noisy environments, prototyping and test facilities, and manufacturing or industrial environments. The role occasionally requires weekend work and extended hours to support launch and critical project timelines. The salary range for employees working onsite at the Alameda headquarters is $108,735 to $127,923. The actual salary may depend on education, experience, knowledge, skills, ability, work-location market data, and comparison with other employees in the role. Full-time employees, excluding interns, are offered access to competitive compensation, medical, dental, and vision benefits for employees and their dependents, paid vacation, a 401(k), and pre-tax health insurance, dependent care, and commuter benefits through an FSA.

Requirements

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field; or an equivalent combination of education, certifications, training, and applicable work experience.
At least 4 years of relevant work experience in IT security, cybersecurity operations, security operations, or a closely related technical security role.
Hands-on experience analyzing security events and alerts using SIEM platforms, endpoint detection and response tools, vulnerability scanners, firewalls, and ticketing systems.
Experience supporting identity, access, and endpoint security technologies, including Microsoft 365, Entra ID, SSO, MFA, endpoint management, or zero-trust initiatives.
Experience supporting vulnerability management, security incident response, or security control administration.
Working knowledge of networking principles, endpoint security, identity and access management, cloud services, and common cybersecurity controls.
Working knowledge of security incident response processes, including investigation, escalation, containment, remediation, recovery, and documentation.
Ability to analyze routine and moderately complex security alerts and events, identify patterns and indicators, and determine appropriate response or escalation.
Ability to assess cybersecurity risks and prioritize remediation based on severity, likelihood, business impact, asset criticality, and organizational criteria.
Ability to analyze vulnerability findings, distinguish actionable risk from lower-priority findings, and coordinate remediation through closure.
Ability to develop and interpret cybersecurity metrics, reports, and trend data related to incidents, vulnerabilities, compliance, and remediation progress.
Ability to collaborate with IT infrastructure teams, application owners, business stakeholders, vendors, and managed service providers to investigate security issues and implement corrective actions.
Ability to apply cybersecurity policies, standards, and control requirements in support of security operations, audits, compliance reviews, and control assessments.
Ability to administer and monitor assigned security technologies and controls within established configurations, standards, and procedures.
Ability to maintain accurate, complete, and audit-ready security documentation and control evidence.
Ability to manage multiple security priorities and remediation activities in a changing operational environment.
Ability to analyze technical security problems and identify practical, risk-based solutions.
Ability to communicate cybersecurity risks, findings, and remediation requirements effectively to technical and non-technical audiences.
Occasional weekend work is required.
Occasional extended hours are required to support launch and critical project timelines.
Ability to meet Department of Energy authorization requirements for access to Part 810-controlled information at the facility.

Nice To Haves

Familiarity with NIST 800-171, CMMC, ISO 27001, or similar security frameworks.
Professional cybersecurity certifications such as Security+, CySA+, GSEC, SSCP, Microsoft security certifications, or similar; certifications are preferred but not required.
Prior experience in a highly regulated industry, government contractor environment, engineering organization, industrial or manufacturing company, and/or energy company.
Prior experience in a high-growth or rapidly scaling environment.
Some travel may be required (5%).

Responsibilities

Independently monitor and analyze activity across computer networks, systems, cloud platforms, and SaaS applications for suspicious activity and potential security incidents.
Configure and onboard supported IT systems and appliances into the enterprise SIEM, validate log collection, and support detection and investigation capabilities.
Analyze, investigate, and respond to SIEM, endpoint protection, firewall, identity, and access management alerts; escalate complex or high-risk events as appropriate.
Investigate and document routine and moderately complex security incidents, coordinate containment and remediation, and escalate as appropriate.
Perform vulnerability scanning, analysis, prioritization, reporting, and remediation tracking through closure.
Work with IT infrastructure teams to identify, assess, prioritize, and resolve network, endpoint, cloud, and application security risks.
Apply and support maintenance and enforcement of IT security policies and procedures, including data handling, acceptable use, access control, and incident response.
Perform assigned audit, compliance review, evidence collection, and control assessment activities against applicable regulatory frameworks.
Administer and monitor assigned firewalls, endpoint protection, encryption, identity and access management, multi-factor authentication, and secure remote access controls.
Review user access, permissions, and privileged accounts to enforce least-privilege and zero-trust principles.
Support security awareness initiatives and reinforce cybersecurity best practices across the organization.
Maintain accurate documentation of security incidents, risks, procedures, control evidence, and remediation activities.
Coordinate assigned security activities with third-party cybersecurity vendors and managed service providers.
Monitor developments in cybersecurity threats, vulnerabilities, trends, and regulatory requirements.
Develop and maintain metrics and reports on security alerts, vulnerabilities, incident response, compliance status, and remediation progress.
Perform other duties as assigned.