OT/IT Cyber Security Engineer V

X-Energy•Rockville, MD

15h

About The Position

This position is responsible for the development and execution of cyber security engineering strategies and activities in support of plant design and engineering teams. This role integrates the cyber security philosophy into the design of plant information and operational technology systems and is responsible for implementation and assessment of cyber security systems, supports the cyber security assessments of Xe-100 systems, and recommends solutions to cyber security issues.

Requirements

High school diploma or equivalent.
Typically, fifteen years combined experience of Cyber Engineering, IT Networking and Operational Technologies required.
Advanced knowledge and experience managing cybersecurity tools such as NDR, EDR, and SIEM.
Advanced experience with Azure and AWS.
Identity and Access Management technologies including Federation, Multi-Factor Authentication (MFA), and Public Key Infrastructure (PKI).
Cloud technologies to include AWS, Azure, Docker, Kubernetes, and DevSecOps.
Networking, Firewall, and software-defined networking.
Integration of cybersecurity tools to support an Enterprise level Cybersecurity program.
Leveraging Artificial Intelligence (AI), Machine Learning (ML), and Orchestration to secure the environment.
Knowledge of ServiceNow platform capabilities, modules, and best practices.
Experience in ServiceNow development and architecture.
Familiarity with ITIL processes and service management principles.
Technical skills, including scripting, workflow configuration, and business rule development.
Ability to independently design and lead complex user interfaces, integrations and workflows.
Proficiency in JavaScript, AngularJS, HTML, CSS, and ServiceNow Glide API.

Nice To Haves

Candidates with fifteen years combined experience of Cyber Engineering, IT Networking and Operational Technologies preferred for this position.
One or more of the following qualifications is required: Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), GIAC (Global Information Assurance Certification), Certified Incident Handler GCIH, GIAC Certified Penetration Tester (GPEN), Global Industrial Cybersecurity Professional (GICSP) or equivalent.

Responsibilities

Execute the advanced threat hunt operations using known adversary tactics, techniques, and procedures as well as indicators of attack to detect adversaries.
Develop threat intelligence to detect, respond, and defeat advanced persistent threats (APTs).
Develop and produce reports on all activities and incidents to help maintain day-to-day status, develop, and report on trends, and provide focus and situational awareness on all issues.
Identify and remediate control weaknesses.
Review data with firewall administrators, engineering, system administrators, and other appropriate groups to determine the risk of security events.
Perform complex (senior-level) information security analysis work.
Develop and recommend plans to safeguard computer/server/network configurations and data files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
Execute the performance and review of technical risk assessments and new and existing applications.
Develop and implement systems and procedures to prevent, detect, contain, and correct data security breaches.
Maintain professional demeanor and behavior at all times in all forms of communication.
Perform other duties as assigned by manager.