Cybersecurity GRC Engineer

X Energy, LLC is building the Xe-100 advanced nuclear reactor, and this role focuses on strengthening cybersecurity governance, risk management, and compliance (GRC) across the plant lifecycle for nuclear facility design and engineering. The position is hybrid in Gaithersburg, MD and comes with a salary range of USD 112,500 to 128,250 per year, plus benefits designed to support your health and long-term planning.

Benefits

• 401K plan with an employer match
• Medical/Dental/Vision Insurance
• Life and Disability Insurance
• Paid Time Off
• Tuition Reimbursement/Professional Development policy

Responsibilities

• Execute advanced threat hunt operations using known adversary tactics, techniques, and procedures, along with indicators of attack to detect adversaries.
• Develop threat intelligence to detect, respond to, and help defeat advanced persistent threats (APTs).
• Develop and produce reports on activities and incidents to support day-to-day status, trend development, and situational awareness across security issues.
• Identify and remediate control weaknesses.
• Review data with firewall administrators, engineering, system administrators, and other teams to determine the risk associated with security events.
• Perform complex, senior-level information security analysis work.
• Develop and recommend plans to safeguard computer/server/network configurations and data files against accidental or unauthorized modification, destruction, or disclosure, including support for emergency data processing needs.
• Execute performance and reviews of technical risk assessments for new and existing applications.
• Develop and implement systems and procedures to prevent, detect, contain, and correct data security breaches.
• Maintain a professional demeanor and behavior in all forms of communication.
• Perform other duties as assigned by the manager.

Requirements

• High school diploma or equivalent
• Typically 5 years of experience in a cybersecurity role
• Knowledge of ServiceNow platform capabilities, modules, and best practices
• Experience in ServiceNow development and architecture
• Familiarity with ITIL processes and service management principles
• Technical skills including scripting, workflow configuration, and business rule development
• Ability to independently design and lead complex user interfaces, integrations, and workflows
• Proficiency in JavaScript, AngularJS, HTML, CSS, and ServiceNow Glide API
• Knowledge and experience managing cybersecurity tools such as NDR, EDR, and SIEM
• Experience with Azure and AWS
• One or more of the following qualifications is required: CISSP, CISA, GIAC (Global Information Assurance Certification), GCIH, GPEN, GICSP, or equivalent
• Identity and Access Management technologies including Federation, MFA, and PKI
• Cloud technologies including AWS, Azure, Docker, Kubernetes, and DevSecOps
• Networking, Firewall, and software-defined networking
• Ability to integrate cybersecurity tools to support an enterprise-level cybersecurity program
• Experience leveraging AI, Machine Learning (ML), and Orchestration to secure the environment

Technologies: ServiceNow, ITIL, JavaScript, AngularJS, HTML, CSS, ServiceNow Glide API, NDR, EDR, SIEM, Azure, AWS, Federation, Multi-Factor Authentication (MFA), Public Key Infrastructure (PKI), Docker, Kubernetes, DevSecOps, Artificial Intelligence (AI), Machine Learning (ML)

Compensation: Salary range for this position is $112,500- $128,250. Compensation ranges listed for US job postings reflect base salary only and do not include benefits or other incentives.

Employment Type: Full time - Exempt