IT Security Analyst

OpenKrill; United States; Hybrid; USD 109,000 - 127,000; Full time

Job summary

Kairos Power is seeking an IT Security Analyst II to strengthen the security and compliance of its hybrid, multi-site IT environment, including on-premises systems and SaaS platforms. You will monitor, detect, and respond to security events and coordinate with IT and business teams to reduce risk.

The role requires hands-on experience with SIEM, vulnerability management, incident response, and knowledge of NIST 800-171, CMMC or ISO 27001.

Qualifications

• Bachelor's degree or equivalent in CS/IT/Cybersecurity.
• 4+ years in IT security or cybersecurity operations.
• Hands-on analysis of security events with SIEM and EDR tools.
• Experience with identity, access, and endpoint security technologies.
• Familiarity with NIST 800-171, CMMC, ISO 27001 or similar.
• Professional certifications such as Security+, CySA+, GSEC, SSCP preferred.
• Experience in regulated industries or government contractors preferred.

Responsibilities

• Monitor networks, systems, and cloud platforms for security incidents.
• Configure systems into the enterprise SIEM and validate logs.
• Investigate alerts from SIEM, EDR, firewall, IAM; escalate as needed.
• Contain and remediate security incidents with coordination.
• Perform vulnerability management scanning and remediation tracking.
• Collaborate with IT teams to address security risks.
• Maintain security policies, data handling, access control, incident response.
• Assist audits and control assessments against regulatory frameworks.
• Monitor and report security metrics and remediation progress.

Skills

Security operations

SIEM analysis

Incident response

Vulnerability management

Identity & access mgmt

Zero-trust / MFA

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Microsoft 365

Entra ID

SSO

MFA

Endpoint management

Job description

Company Overview

Kairos Power is a new nuclear energy technology and engineering company whose mission is to enable the world’s transition to clean energy, with the ultimate goal to dramatically improve people’s quality of life while protecting the environment. This goal will be accomplished through the commercialization of the fluoride-salt-cooled, high-temperature reactor (FHR) that can be deployed with robust safety, affordable costs, and flexible operation to accommodate the expansion of variable renewables.

Job Summary

We are searching for an IT Security Analyst II to support and strengthen the security, monitoring, and compliance of our multi-site, hybrid corporate IT infrastructure, on-premises systems, and SaaS application platforms. This role will independently perform security monitoring, vulnerability management, incident response, policy and control administration, and compliance activities within established cybersecurity programs and procedures. The role will collaborate with IT infrastructure, application owners, business teams, and external service providers to identify, assess, and remediate cybersecurity risks. The ideal candidate will have hands‑on cybersecurity operations experience in a medium- or enterprise-scale environment, preferably within a highly regulated industry or an organization subject to NIST 800-171, CMMC, or similar security frameworks.

Responsibilities

• Independently monitor and analyze activity across computer networks, systems, cloud platforms, and SaaS applications for suspicious activity and potential security incidents.
• Configure and onboard supported IT systems and appliances into the enterprise SIEM, including validating log collection and supporting detection and investigation capabilities.
• Analyze, investigate, and respond to SIEM, endpoint protection, firewall, identity, and access management alerts, escalating complex or high-risk events as appropriate.
• Investigate and document routine and moderately complex security incidents; coordinate containment and remediation activities and elevate as appropriate.
• Perform vulnerability management activities, including scanning, analysis, prioritization, reporting, and remediation tracking through closure.
• Work with IT infrastructure teams to identify, assess, prioritize, and resolve network, endpoint, cloud, and application security risks.
• Apply and support the maintenance and enforcement of internal IT security policies and procedures, including data handling, acceptable use, access control, and incident response.
• Perform assigned audit, compliance review, evidence collection, and control assessment activities against applicable regulatory frameworks.
• Administer and monitor assigned security controls for firewalls, endpoint protection, encryption, identity and access management, multi-factor authentication, and secure remote access.
• Review user access, permissions, and privileged accounts to enforce least‑privilege and zero‑trust principles.
• Support security awareness initiatives and reinforce cybersecurity best practices across the organization.
• Maintain accurate documentation of security incidents, risks, procedures, control evidence, and remediation activities.
• Coordinate assigned security activities with third‑party cybersecurity vendors and managed service providers.
• Monitor developments in current cybersecurity threats, vulnerabilities, trends, and regulatory requirements.
• Develop and maintain metrics and reports on security alerts, vulnerabilities, incident response, compliance status, and remediation progress.
• Perform other duties as assigned.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field; or an equivalent combination of education, certifications, training, and applicable work experience.
• 4+ years of relevant work experience in IT security, cybersecurity operations, security operations, or a closely related technical security role.
• Hands‑on experience analyzing security events and alerts using SIEM platforms, endpoint detection and response tools, vulnerability scanners, firewalls, and ticketing systems.
• Experience supporting identity, access, and endpoint security technologies, including Microsoft 365, Entra ID, SSO, MFA, endpoint management, or zero‑trust initiatives.
• Experience supporting vulnerability management, security incident response, or security control administration.
• Familiarity with security frameworks such as NIST 800-171, CMMC, ISO 27001, or similar standards is preferred.
• Professional certifications such as Security+, CySA+, GSEC, SSCP, or similar are preferred.
• Prior work experience in a highly regulated industry, government contractor environment, engineering organization, industrial/manufacturing company, and/or energy company is preferred.
• Prior work experience in a high‑growth or rapidly scaling environment is preferred.

Knowledge, Skills & Abilities:

• Working knowledge of networking principles, endpoint security, identity and access management, cloud services, and common cybersecurity controls.
• Working knowledge of security incident response principles and processes, including investigation, escalation, containment, remediation, recovery, and documentation.
• Ability to independently analyze routine and moderately complex security alerts and events, identify relevant patterns and indicators, and determine appropriate response or escalation.
• Ability to assess cybersecurity risks and prioritize remediation activities based on severity, likelihood, business impact, asset criticality, and established organizational criteria.
• Ability to analyze vulnerability findings, distinguish actionable risk from lower-priority findings, and coordinate remediation through closure.
• Ability to develop and interpret cybersecurity metrics, reports, and trend data related to incidents, vulnerabilities, compliance, and remediation progress.
• Ability to collaborate effectively with IT infrastructure teams, application owners, business stakeholders, third‑party vendors, and managed service providers to investigate security issues and implement corrective actions.
• Ability to apply cybersecurity policies, standards, and control requirements in support of security operations, audits, compliance reviews, and control assessments.
• Ability to administer and monitor assigned security technologies and controls within established configurations, standards, and procedures.
• Ability to maintain accurate, complete, and audit‑ready security documentation and control evidence.
• Ability to manage multiple security priorities and assigned remediation activities in a changing operational environment.
• Ability to analyze technical security problems and identify practical, risk‑based solutions.
• Ability to communicate cybersecurity risks, findings, and remediation requirements effectively to technical and non‑technical audiences.

Physical Demands

• Remaining in a stationary position, often standing, or sitting for prolonged periods
• Communicating with others to exchange information

Environmental Conditions

• General office environment
• Noisy environments
• Prototyping/Test Facilities
• Manufacturing/Industrial Environments

Safety and PPE

• Reading and interpreting hazardous warning signs
• Reporting issues with equipment or unsafe conditions
• Wearing proper PPE, to include face mask, face shields, gloves, safety shoes, or other PPE as required

Travel

• Some travel may be required (5%)

Certification

• Professional cybersecurity certifications such as CompTIA Security+, CySA+, ISC2 SSCP, GIAC GSEC, Microsoft security certifications, or similar is preferred but not required.

Additional Requirements

• Occasionally requires working weekends
• Occasionally requires extended hours to support launch and critical project timelines

The salary range for this position is $108,735 to $127,