Cyber Security Analyst

Type One Energy Group, Inc.; Madison (WI); On-site; USD 70,000 - 100,000; Full time

Benefits offered by this job

Hybrid work policy

Stock options

Insurance plans

Retirement options

Job summary

Type One Energy seeks a Cyber Security Analyst in Madison, WI to help operate and mature its information security program. You will build automated hardware/software inventory pipelines, support the standup of a new SIEM, and establish asset visibility to underpin IT general controls.

You will advance into deeper security operations, detection engineering, and incident response while collaborating with IT, engineering, legal, and finance to strengthen security across the organization.

Qualifications

• One to three years of experience in IT, security operations, or a closely related technical role; equivalent education plus relevant hands-on experience will be considered
• Working familiarity with core security operations concepts, including SIEM, endpoint detection and response, alerting, and vulnerability management
• Demonstrated scripting and automation ability (e.g., PowerShell, Python), with a bias toward automating repetitive work
• Understanding of endpoint and identity management platforms (e.g., Microsoft Entra ID, Intune, or equivalents)
• Strong attention to detail and disciplined documentation habits; comfort owning data quality and reconciliation
• Ability to work effectively with managed service providers and external vendors
• Strong analytical, troubleshooting, and problem-solving skills
• CompTIA Security+ or equivalent certification preferred
• Exposure to CIS Controls, NIST CSF, SOC 2, or SOX ITGC preferred
• Hands-on exposure to SIEM content or detection engineering, and to asset or SaaS discovery tooling preferred
• Experience in regulated, manufacturing, or critical-infrastructure environment preferred
• Familiarity with data classification and DLP concepts such as Microsoft Purview sensitivity labeling preferred

Responsibilities

• Build and automate hardware and software inventory pipelines
• Support implementation and tuning of a new SIEM with data source onboarding
• Maintain authoritative system inventory and audit-ready evidence for IT general controls
• Monitor and triage security events with the SOC provider, growing internal security operations
• Identify and coordinate remediation of vulnerabilities across endpoints and identity estate
• Support access management, change management, and asset completeness for audits
• Contribute to incident response readiness, runbook development, and post-incident docs
• Maintain security documentation and control records
• Oversee managed service providers and vendors to ensure evidence of controls
• Collaborate with IT, engineering, legal, and finance on security intersect points

Skills

Security operations

SIEM

PowerShell

Python

Endpoint protection

Vulnerability management

Data quality

Vendor coordination

Analytical thinking

Incident response

Education

Equivalent education

Tools

Intune

Entra ID

Job description

About this position

Join us in our mission to commercialize fusion energy

About Type One Energy

Type One Energy Group is mission-driven to provide sustainable, affordable fusion power to the world. Established in 2019 and venture-backed in 2023, the company is led by a team of globally recognized fusion scientists with a strong track record of building state-of-the‑art stellarator fusion machines, together with veteran business leaders experienced in scaling companies and commercializing energy technologies.

If you are searching for the best new ideas and share our vision, join us as a Cyber Security Analyst. This is what you need to know:

Location: Madison, WI

Salary: Highly Competitive Plus Benefits

Contract: Permanent, full time

Reporting to: Director of IT

Your role in the mission:

The Security Analyst will help operate and mature Type One Energy's information security program as the second internal security practitioner, working alongside the Senior Cybersecurity Engineer. This is a foundational role with a clear trajectory. In the first year you will lead the buildout of automated hardware and software inventory and support the standup of a new SIEM, establishing the asset visibility and detection foundations on which the broader security program and the company's IT general controls depend. As those foundations stabilize, the role grows into deeper security operations, detection engineering, and incident response. It suits an early-career security professional who is technically curious, process-disciplined, and motivated to build reliable, automated systems from the ground up. You will contribute to:

• Build and automate hardware and software inventory using existing security and endpoint telemetry, replacing manual reconciliation with reliable, repeatable pipelines
• Support the implementation and tuning of a new SIEM, including data source onboarding, alert triage, and detection use‑case development
• Maintain the authoritative system inventory and produce audit-ready evidence of its completeness and accuracy in support of IT general controls (ITGC)
• Monitor, triage, and elevate security events in coordination with the managed SOC provider, developing into an internal point of continuity for security operations
• Identify, track, and coordinate remediation of vulnerabilities across the endpoint and identity estate
• Support access management, change management, and asset‑completeness evidence in preparation for external audit
• Contribute to incident response readiness, runbook development, and post‑incident documentation
• Maintain security documentation and control records in alignment with the information security document suite
• Support oversight of managed service providers and vendors, validating that outsourced controls are performed and evidenced
• Collaborate with IT, engineering, legal, and finance teams where security intersects their work

What you’ll need:

• One to three years of experience in IT, security operations, or a closely related technical role; equivalent education plus relevant hands‑on experience will be considered
• Working familiarity with core security operations concepts, including SIEM, endpoint detection and response, alerting, and vulnerability management
• Demonstrated scripting and automation ability (e.g., PowerShell, Python), with a bias toward automating repetitive work rather than performing it manually
• Understanding of endpoint and identity management platforms (e.g., Microsoft Entra ID, Intune, or equivalents)
• Strong attention to detail and disciplined documentation habits; comfort owning data quality and reconciliation
• Ability to work effectively with managed service providers and external vendors
• Strong analytical, troubleshooting, and problem‑solving skills
• CompTIA Security+ or an equivalent certification, or active progress toward one, preferred
• Exposure to compliance frameworks such as CIS Controls, NIST CSF, SOC 2, or SOX ITGC, preferred
• Hands‑on exposure to SIEM content or detection engineering, and to asset or SaaS discovery tooling, preferred
• Experience in a regulated, manufacturing, or critical‑infrastructure environment, preferred
• Familiarity with data classification and DLP concepts such as Microsoft Purview sensitivity labeling, preferred

We offer :

In addition to a basic salary and yearly bonus, you will also get…

• A hybrid work policy
• Stock options
• Insurance plans
• Retirement options
• And many more great voluntary benefits

Type One Energy applies proven advanced manufacturing methods, modern computational physics and high‑field superconducting magnets to develop its optimized stellarator fusion energy system. Our FusionDirect development program pursues the lowest‑risk, shortest‑schedule path to a fusion power plant over the coming decade, using a partner‑intensive and capital‑efficient strategy.

Type One Energy is committed to community engagement in the development and deployment of its clean energy technology. For more information, visit www.typeoneenergy.com or follow us on LinkedIn.

Export Control Compliance Notice

This position may require access to technology, technical data, software, or other information that is subject to U.S. export control laws and regulations. Any offer of employment will be contingent upon the Company's ability to comply with applicable U.S. Export Control Laws, including obtaining any required government authorizations.

Type One Energy is a Global, U.S.-based company that develops and utilizes technologies subject to U.S. export control and trade compliance regulations. Certain positions may require access to controlled technologies, technical data, software, or other information regulated by U.S. Export Control Laws.

For positions involving access to export‑controlled technology or information, the Company may be required to determine whether any government authorization or license is needed before such access can be provided. Any offer of employment for such positions may be contingent upon the Company's ability to comply with applicable U.S. Export Control Laws and obtain any required government authorizations.

U.S. Employment Eligibility Verification

For positions based in the United States, Type One Energy participates in E-Verify and verifies the identity and employment authorization of newly hired employees in accordance with applicable federal law. Employees hired to work in the United States will be required to complete the Form I-9 employment eligibility verification process upon hire.

Type One Energy is an equal opportunity employer. Employment decisions are made based on qualifications, merit, business needs, and compliance with applicable laws and regulations.

Candidate Privacy

Type One Energy collects personal information from applicants for recruitment, hiring, and related business purposes. We process applicant information in accordance with applicable privacy and data protection laws and take reasonable measures to protect the confidentiality and security of personal information. By applying for a position, you acknowledge that your personal information may be collected, used, stored, transferred, and disclosed as necessary to evaluate your candidacy, conduct pre‑employment screenings where permitted by law, and comply with legal and regulatory requirements.

Share this Job: