Cybersecurity GRC Engineer

Cybersecurity Jobs; Gaithersburg (MD); Ibrido; USD 113.000 - 128.000; Tempo pieno

Vantaggi offerti da questo lavoro

401K match

Medical/Dental/Vision Insurance

Life and Disability Insurance

Paid Time Off

Tuition Reimbursement

Descrizione del lavoro

Cybersecurity Jobs is seeking a seasoned cybersecurity professional to support GRC practices for nuclear facility design and engineering, with emphasis on the Xe-100 reactor. Hybrid role based in Gaithersburg, MD, focusing on integrating cybersecurity across IT/OT lifecycles.

The role requires 5+ years in cybersecurity, ServiceNow expertise, ITIL familiarity, and strong scripting/UI skills to lead complex risk assessments and remediation efforts.

Competenze

• High school diploma or equivalent.
• Typically 5 years of cybersecurity experience.
• Proficiency with ServiceNow and ITIL processes.
• Strong scripting and UI/workflow design skills.
• Experience with cloud platforms (Azure, AWS) and security tools.
• Ability to design and lead complex integrations.

Mansioni

• Execute advanced threat hunting activities using TTPs and indicators of attack.
• Develop threat intelligence capabilities to detect and respond to APTs.
• Produce reports to maintain day-to-day status and identify trends.
• Identify and remediate control weaknesses.
• Collaborate with firewall admins, engineering, and system teams to assess risk.
• Perform complex, senior-level information security analysis.
• Develop safeguarding plans for systems and data to prevent breaches.
• Lead risk assessments for new and existing applications.
• Develop and implement procedures to prevent, detect, and contain breaches.
• Maintain professional demeanor in all communications.
• Perform other duties as assigned by the manager.

Conoscenze

JavaScript

AngularJS

HTML

CSS

ServiceNow Glide API

ServiceNow development

ITIL

Scripting

Workflow configuration

PKI

Formazione

High school diploma or equivalent

Strumenti

ServiceNow

NDR

EDR

SIEM

Azure

AWS

Docker

Kubernetes

DevSecOps

AI

ML

Descrizione del lavoro

In this role, you will support cybersecurity Governance, Risk, and Compliance (GRC) practices for nuclear facility design and engineering, with a focus on the Xe-100 advanced nuclear reactor. You will help integrate cybersecurity requirements, risk management, and regulatory compliance across IT and OT systems throughout the plant lifecycle.

Location and Work Arrangement

Gaithersburg, MD (hybrid)

Salary and Employment Type

• Salary: USD 112,500 to 128,250 per year
• Classification: Full time, Exempt
• Compensation note: Compensation ranges listed for US job postings reflect base salary only and do not include benefits or other incentives.

Key Responsibilities

• Execute advanced threat hunting activities using known adversary tactics, techniques, and procedures, along with indicators of attack to detect adversaries.
• Develop threat intelligence capabilities to detect, respond to, and help defeat advanced persistent threats (APTs).
• Develop and produce reports on activities and incidents to maintain day-to-day status, track and report trends, and provide situational awareness.
• Identify and remediate control weaknesses.
• Review data with firewall administrators, engineering, system administrators, and other relevant teams to determine the risk associated with security events.
• Perform complex, senior-level information security analysis.
• Develop and recommend safeguarding plans for computer, server, network configurations, and data files to prevent accidental or unauthorized modification, destruction, or disclosure, including support for emergency data processing needs.
• Execute performance and reviews of technical risk assessments for both new and existing applications.
• Develop and implement systems and procedures to prevent, detect, contain, and correct data security breaches.
• Maintain a professional demeanor and behavior in all forms of communication.
• Perform other duties as assigned by the manager.

Required Qualifications

• Education: High school diploma or equivalent
• Experience: Typically 5 years of experience in a cybersecurity role
• Knowledge of ServiceNow platform capabilities, modules, and best practices
• Experience in ServiceNow development and architecture
• Familiarity with ITIL processes and service management principles
• Technical skills including scripting, workflow configuration, and business rule development
• Ability to independently design and lead complex user interfaces, integrations, and workflows
• Proficiency in JavaScript, AngularJS, HTML, CSS, and ServiceNow Glide API
• Knowledge and experience managing cybersecurity tools such as NDR, EDR, and SIEM
• Experience with Azure and AWS
• One or more of the following certifications is required: CISSP, CISA, GIAC (Global Information Assurance Certification), GCIH, GPEN, GICSP, or equivalent
• Identity and Access Management technologies including Federation, Multi-Factor Authentication (MFA), and Public Key Infrastructure (PKI)
• Cloud technologies including AWS, Azure, Docker, Kubernetes, and DevSecOps
• Networking, firewall, and software-defined networking
• Ability to integrate cybersecurity tools to support an enterprise-level cybersecurity program
• Leveraging Artificial Intelligence (AI), Machine Learning (ML), and Orchestration to secure the environment

Tools and Technologies

• ServiceNow
• ITIL
• JavaScript
• AngularJS
• HTML
• CSS
• ServiceNow Glide API
• NDR
• EDR
• SIEM
• Azure
• AWS
• Federation
• Multi-Factor Authentication (MFA)
• Public Key Infrastructure (PKI)
• Docker
• Kubernetes
• DevSecOps
• Artificial Intelligence (AI)
• Machine Learning (ML)

Benefits

• 401K plan with an employer match
• Medical/Dental/Vision Insurance
• Life and Disability Insurance
• Paid Time Off
• Tuition Reimbursement/Professional Development policy