Nuclear GRC Cybersecurity Engineer

X-energy • Rockville, MD

8d • $125,000 - $142,500 • Remote

About The Position

This position implements and maintains cybersecurity Governance, Risk, and Compliance (GRC) practices in support of nuclear facility design and engineering, with a focus on the Xe-100 advanced nuclear reactor. It integrates cybersecurity requirements, risk management, and regulatory compliance into the design, development, and assessment of plant Information Technology (IT) and Operational Technology (OT) systems. The successful candidate applies knowledge of nuclear industry cybersecurity requirements and regulatory frameworks to support cybersecurity assessments, identify and mitigate risks, evaluate compliance with applicable standards, and collaborate with plant design and engineering teams to incorporate cybersecurity controls throughout the plant lifecycle.

The role also performs advanced threat hunting and threat intelligence activities, assesses and remediates security risks and control weaknesses, supports incident detection and response, and helps safeguard computer, server, and network configurations and data. It involves cybersecurity tools and technologies, including ServiceNow, cloud platforms, identity and access management, networking, and security automation.

The position is remote eligible, based at the listed Gaithersburg, Maryland location, with travel of 10% to offices or sites. Hours are 8:00 a.m. to 5:00 p.m., Monday through Friday. The role is classified as full-time, exempt.

Requirements

• High school diploma or equivalent.
• Typically, five years of experience in a cybersecurity role.
• Knowledge of ServiceNow platform capabilities, modules, and best practices.
• Experience in ServiceNow development and architecture.
• Familiarity with ITIL processes and service management principles.
• Technical skills including scripting, workflow configuration, and business rule development.
• Ability to independently design and lead complex user interfaces, integrations, and workflows.
• Proficiency in JavaScript, AngularJS, HTML, CSS, and ServiceNow Glide API.
• Knowledge and experience managing cybersecurity tools such as NDR, EDR, and SIEM.
• Experience with Azure and AWS.
• One or more of the following qualifications: CISSP, CISA, GIAC certification, GCIH, GPEN, GICSP, or equivalent.
• Knowledge of Identity and Access Management technologies, including federation, Multi-Factor Authentication (MFA), and Public Key Infrastructure (PKI).
• Knowledge of cloud technologies, including AWS, Azure, Docker, Kubernetes, and DevSecOps.
• Knowledge of networking, firewalls, and software-defined networking.
• Experience integrating cybersecurity tools to support an enterprise-level cybersecurity program.
• Knowledge of leveraging Artificial Intelligence (AI), Machine Learning (ML), and orchestration to secure an environment.

Responsibilities

• Execute advanced threat-hunt operations using known adversary tactics, techniques, and procedures, as well as indicators of attack, to detect adversaries.
• Develop threat intelligence to detect, respond to, and defeat advanced persistent threats (APTs).
• Develop and produce reports on activities and incidents to maintain day-to-day status, report trends, and provide focus and situational awareness.
• Identify and remediate control weaknesses.
• Review data with firewall administrators, engineering, system administrators, and other appropriate groups to determine the risk of security events.
• Perform complex, senior-level information security analysis work.
• Develop and recommend plans to safeguard computer, server, and network configurations and data files against accidental or unauthorized modification, destruction, or disclosure, and to meet emergency data-processing needs.
• Execute technical risk assessments and assess new and existing applications.
• Develop and implement systems and procedures to prevent, detect, contain, and correct data security breaches.
• Maintain a professional demeanor and behavior in all forms of communication.
• Perform other duties as assigned by the manager.
• Integrate cybersecurity requirements, risk management, and regulatory compliance into plant IT and OT system design, development, and assessment.

Benefits

• 401K plan with an employer match.
• Medical, dental, and vision insurance.
• Life and disability insurance.
• Paid time off.
• Tuition reimbursement and professional development policy supporting continuing education.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: High school or GED