GRC Cybersecurity Engineer - Nuclear/OT

X-energy; Rockville (MD); Hybrid; USD 113,000 - 128,000; Full time

Benefits offered by this job

401K

Medical/Dental/Vision Insurance

Life and Disability Insurance

Paid Time Off

Tuition Reimbursement/Professional Dev

Job summary

X Energy, LLC is seeking a cybersecurity professional to implement and maintain governance, risk and compliance (GRC) practices in support of the Xe-100 reactor. The role integrates cybersecurity requirements, risk management, and regulatory compliance into IT and OT design, development, and assessment to ensure controls are embedded throughout the plant lifecycle.

The position involves advanced threat hunting, threat intelligence development, and collaboration with design and engineering teams.

Qualifications

• High school diploma or equivalent.
• Typically, five years of experience in a Cybersecurity role required.
• Knowledge of ServiceNow platform capabilities, modules, and best practices.
• Experience in ServiceNow development and architecture.
• Familiarity with ITIL processes and service management principles.
• Technical skills, including scripting, workflow configuration, and business rule development.
• Ability to independently design and lead complex user interfaces, integrations and workflows.
• Proficiency in JavaScript, AngularJS, HTML, CSS, and ServiceNow Glide API.
• Knowledge and experience managing cybersecurity tools such as NDR, EDR, and SIEM.
• Experience with Azure and AWS.
• One or more of the following qualifications is required: CISSP, CISA, GIAC, GPEN, GICSP or equivalent.
• Identity and Access Management technologies including Federation, MFA, and PKI.
• Cloud technologies to include AWS, Azure, Docker, Kubernetes, and DevSecOps.
• Networking, Firewall, and software-defined networking.
• Integration of cybersecurity tools to support an Enterprise level Cybersecurity program.
• Leveraging AI/ML and Orchestration to secure the environment.

Responsibilities

• Execute advanced threat hunt operations using known adversary tactics and indicators of attack.
• Develop threat intelligence to detect, respond, and defeat advanced threats.
• Develop and produce reports on activities and incidents and trends.
• Identify and remediate control weaknesses.
• Review data with firewall administrators, engineering, system administrators, and others to assess risk.
• Perform complex information security analysis work.
• Develop and implement systems to prevent, detect, contain, and correct data security breaches.
• Perform other duties as assigned by manager.

Skills

Threat hunting

Threat intelligence

Security analysis

Scripting

JavaScript

Azure

AWS

ServiceNow

ITIL

Networking

Education

High school diploma or equivalent

Tools

ServiceNow

NDR/EDR/SIEM

Azure

AWS

Docker

Kubernetes

Job description

X Energy, LLC is seeking a cybersecurity professional to implement and maintain governance, risk and compliance (GRC) practices in support of the Xe-100 reactor. The role integrates cybersecurity requirements, risk management, and regulatory compliance into IT and OT design, development, and assessment to ensure controls are embedded throughout the plant lifecycle.

The position involves advanced threat hunting, threat intelligence development, and collaboration with design and engineering teams.