Cybersecurity GRC Engineer

X-Energy, LLC; Rockville (MD); Remote; USD 113,000 - 128,000; Full time

Benefits offered by this job

401K plan with an employer match

Medical/Dental / Vision Insurance

Life and Disability Insurance

Paid Time Off

Tuition Reimbursement/Professional Dev

Job summary

X Energy, LLC is hiring a cybersecurity professional to implement GRC practices supporting the Xe-100 reactor. You will integrate cybersecurity requirements, risk management, and regulatory compliance into IT/OT design and lifecycle assessments.

The role collaborates with design and engineering teams to ensure controls are embedded throughout the plant lifecycle. Remote eligibility is noted with a travel requirement to offices/sites up to 10%.

Qualifications

• High school diploma or equivalent.
• Typically, five years of experience in a Cybersecurity role required.
• Knowledge of ServiceNow platform capabilities, modules, and best practices.
• Experience in ServiceNow development and architecture.
• Familiarity with ITIL processes and service management principles.
• Technical skills, including scripting, workflow configuration, and business rule development.
• Ability to independently design and lead complex user interfaces, integrations and workflows.
• Proficiency in JavaScript, AngularJS, HTML, CSS, and ServiceNow Glide API.
• Knowledge and experience managing cybersecurity tools such as NDR, EDR, and SIEM.
• Experience with Azure and AWS.
• CISSP, CISA, GIAC, GCIH, GPEN, GIAC CS or equivalent.
• Identity and Access Management technologies including Federation, MFA, and PKI.
• Cloud technologies to include AWS, Azure, Docker, Kubernetes, and DevSecOps.
• Networking, Firewall, and software-defined networking.
• Integration of cybersecurity tools to support an Enterprise level Cybersecurity program.
• Leveraging AI, ML, and Orchestration to secure the environment.

Responsibilities

• Execute advanced threat hunt operations using tactics and indicators of attack.
• Develop threat intelligence to detect and defeat APTs.
• Develop and produce reports on activities and incidents with trends and situational awareness.
• Identify and remediate control weaknesses.
• Review data with firewall admins and engineers to determine risk of security events.
• Perform complex information security analysis work.
• Develop and recommend plans to safeguard configurations and data files.
• Execute performance and review of risk assessments for applications.
• Develop and implement systems to prevent, detect, contain, and correct data breaches.
• Maintain professional demeanor in all communications.
• Perform other duties as assigned by manager.

Skills

Threat hunting

Threat intelligence

Incident response

Risk assessment

Firewall knowledge

Azure/AWS

Education

High school diploma

CISSP

CISA

GIAC

Tools

ServiceNow

NDR

EDR

SIEM

Docker

Kubernetes

Job description

Job Description

This position is responsible for implementing and maintaining cybersecurity Governance, Risk, and Compliance (GRC) practices in support of nuclear facility design and engineering, with a focus on the Xe-100 advanced nuclear reactor. The role integrates cybersecurity requirements, risk management, and regulatory compliance into the design, development, and assessment of plant Information Technology (IT) and Operational Technology (OT) systems. The successful candidate will apply knowledge of nuclear industry cybersecurity requirements and regulatory frameworks to support cybersecurity assessments, identify and mitigate risks, evaluate compliance with applicable standards, and collaborate with plant design and engineering teams to ensure cybersecurity controls are incorporated throughout the plant lifecycle.

Job Profile Tasks/Responsibilities

• Execute the advanced threat hunt operations using known adversary tactics, techniques, and procedures as well as indicators of attack to detect adversaries.
• Develop threat intelligence to detect, respond, and defeat advanced persistent threats (APTs).
• Develop and produce reports on all activities and incidents to help maintain day‑to‑day status, develop, and report on trends, and provide focus and situational awareness on all issues.
• Identify and remediate control weaknesses.
• Review data with firewall administrators, engineering, system administrators, and other appropriate groups to determine the risk of security events.
• Perform complex (senior‑level) information security analysis work.
• Develop and recommend plans to safeguard computer/server/network configurations and data files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
• Execute the performance and review of technical risk assessments and new and existing applications.
• Develop and implement systems and procedures to prevent, detect, contain, and correct data security breaches.
• Maintain professional demeanor and behavior at all times in all forms of communication.
• Perform other duties as assigned by manager.

Job Profile Minimum Qualifications

• High school diploma or equivalent.
• Typically, five years of experience in a Cybersecurity role required.
• Knowledge of ServiceNow platform capabilities, modules, and best practices.
• Experience in ServiceNow development and architecture.
• Familiarity with ITIL processes and service management principles.
• Technical skills, including scripting, workflow configuration, and business rule development.
• Ability to independently design and lead complex user interfaces, integrations and workflows.
• Proficiency in JavaScript, AngularJS, HTML, CSS, and ServiceNow Glide API.
• Knowledge and experience managing cybersecurity tools such as NDR, EDR, and SIEM.
• Experience with Azure and AWS.
• One or more of the following qualifications is required: Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), GIAC (Global Information Assurance Certification), Certified Incident Handler GCIH, GIAC Certified Penetration Tester (GPEN), Global Industrial Cybersecurity Professional (GICSP) or equivalent.
• Identity and Access Management technologies including Federation, Multi‑Factor Authentication (MFA), and Public Key Infrastructure (PKI).
• Cloud technologies to include AWS, Azure, Docker, Kubernetes, and DevSecOps.
• Networking, Firewall, and software‑defined networking.
• Integration of cybersecurity tools to support an Enterprise level Cybersecurity program.
• Leveraging Artificial Intelligence (AI), Machine Learning (ML), and Orchestration to secure the environment.

Location

9801 Washingtonian Blvd Gaithersburg, MD

Hours

8:00am-5:00pm, Mon-Fri

Work Site Expectations

Remote eligible

Travel

10% to offices or sites

Compensation

As required by Maryland and other applicable state law, X Energy, LLC (X-energy) lists the expected compensation range for a publicly advertised job opportunity based upon the job requirements (e.g. education/training, experience, skill sets, etc.). Individual candidates who meet the job requirements for the posted position will be offered a salary within this range based on their respective levels of education/training, experience, and other qualifications unique to them. Salary ranges may vary based on the specific office location and region referenced in the posting to take into consideration differences in cost of living and may not be reflective of all regions. Please note that compensation ranges listed for US job postings reflect base salary only and do not include benefits or other incentives. Offers within the posted salary range are commensurate with the individual’s qualifications for the position, along with a view on internal equity, market data, and room for growth. The salary range for this position is: $112,500- $128,250

Position Job Classification

Full time - Exempt

Benefits

X Energy, LLC offers a robust benefits package that includes a 401K plan with an employer match, Medical/Dental /Vision Insurance, Life and Disability Insurance, Paid Time Off, and a Tuition Reimbursement/Professional Development policy that supports the continuing education of our employees.

• 401K plan with an employer match
• Medical/Dental /Vision Insurance
• Life and Disability Insurance
• Paid Time Off
• Tuition Reimbursement/Professional Development policy that supports the continuing education of our employees

An Equal Opportunity Employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

E-Verify Participation

X Energy, LLC participates in E-Verify. Please visit the links below for more information about E-Verify and the protection of your Right to Work. Right To Work Link: If you have the right to work, don't let anyone take it away (e-verify.gov) E-Verify Participation Link: E-Verify Participation Poster English and Spanish

Company Vision

X-energy is delivering the next generation of carbon‑free energy by reinventing nuclear power. We believe in leaving a cleaner planet for our children and grandchildren, while continuing to provide sufficient and affordable power to sustain growing populations around the world. That is why we have reinvented nuclear power, with a unique combination of proven technologies and new innovations, to meet our current and future needs. Watch our Anthem here

An Equal Opportunity Employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

Equal Employment Opportunity Posters

X-energy does not discriminate in employment against qualified individuals on the basis of disability, and understands its obligation to make reasonable accommodation for individuals with physical or mental impairments that qualify as a disability under the ADA and ADAAA, unless the accommodation would impose an undue hardship on the company. It is an applicant’s or employee’s responsibility to participate in this interactive process by seeking an accommodation, assisting X-energy in reviewing accommodation alternatives and providing medical certification of the need for an accommodation. Any applicant or employee who wishes to seek an accommodation under this policy should contact the Human Resources Department via email at [e-mail]. Whether a requested accommodation would create an undue hardship will be determined based on the facts of each particular case.