X-energy LLC conducts a thorough recruiting process and will never issue offers without interview to discuss qualifications and responsibilities.
All applications will be submitted via our company career page, www.x-energy.com/careers/ .
We will never ask you to provide payment information as part of the recruiting process.
If anyone claiming to represent X-energy directs you in a manner otherwise, please contact us at www.x-energy.com/contact-us .
Job Description
This position is responsible for implementing and maintaining cybersecurity Governance, Risk, and Compliance (GRC) practices in support of nuclear facility design and engineering, with a focus on the Xe-100 advanced nuclear reactor.
The role integrates cybersecurity requirements, risk management, and regulatory compliance into the design, development, and assessment of plant Information Technology (IT) and Operational Technology (OT) systems.
The successful candidate will apply knowledge of nuclear industry cybersecurity requirements and regulatory frameworks to support cybersecurity assessments, identify and mitigate risks, evaluate compliance with applicable standards, and collaborate with plant design and engineering teams to ensure cybersecurity controls are incorporated throughout the plant lifecycle.
Job Profile
Tasks/Responsibilities
- Execute the advanced threat hunt operations using known adversary tactics, techniques, and procedures as well as indicators of attack to detect adversaries.
- Develop threat intelligence to detect, respond, and defeat advanced persistent threats (APTs).
- Develop and produce reports on all activities and incidents to help maintain day-to-day status, develop, and report on trends, and provide focus and situational awareness on all issues.
- Identify and remediate control weaknesses.
- Review data with firewall administrators, engineering, system administrators, and other appropriate groups to determine the risk of security events.
- Perform complex (senior-level) information security analysis work.
- Develop and recommend plans to safeguard computer/server/network configurations and data files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
- Execute the performance