ICS/OT Security Engineer III

X-energy LLC conducts a thorough recruiting process and will never issue offers without interview to discuss qualifications and responsibilities. All applications will be submitted via our company career page, www.x-energy.com/careers/. We will never ask you to provide payment information as part of the recruiting process. If anyone claiming to represent X-energy directs you in a manner otherwise, please contact us at www.x-energy.com/contact-us.

Job Description

This role is responsible for the development and execution of cyber security engineering strategies and activities in support of plant design and engineering teams. This role integrates the cyber security philosophy into the design of plant information and operational technology systems and is responsible for implementation and assessment of cyber security systems, supports the cyber security assessments of Xe-100 systems, and recommends solutions to cyber security issues.

 

Job Profile Tasks/Responsibilities

• Collaborate in strategic security relationships between internal resources and external entities to fully secure information, computer, network, and processing systems, including government, customers, vendors, and partner organizations.
• Apply industry experience to architect, develop, implement, maintain, and oversee cybersecurity tools and policies to protect X-energy business and plant operations information systems, including cloud governance and security.
• Where necessary, provide advanced support to help troubleshoot complex issues and architect new solutions.
• Construct and exploit threat intelligence to detect, respond, and defeat advanced persistent threats (APTs).
• Produce reports on all activities and incidents to help maintain day-to-day status, develop, and report on trends, and provide focus and situational awareness on all issues.
• Identify and remediate control weaknesses.
• Review data with firewall administrators, engineering, system administrators, and other appropriate groups to determine the risk of security events.
• Perform intermediate level information security analysis work.
• Develop plans to safeguard computer/server/network configurations and data files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
• Perform and review technical risk assessments of new and existing applications.
• Research, evaluate, and recommend systems and procedures to prevent, detect, containment, and correct data security breaches.
• Maintain professional demeanor and behavior at all times in all forms of communication.
• Perform other duties as assigned by manager.

Job Profile Minimum Qualifications

• Typically, five plus years of progressive experience in cybersecurity, network security or related experience.
• Experience in OT cybersecurity architecture design and strategy within the Power Generation, Gas and Electric business (specifically Industrial Control Systems) (Preferred)
• Ability to lead and execute the OT cybersecurity strategy for OT business areas (Preferred)
• In-depth knowledge of OT cybersecurity architecture that support various components of NIST cybersecurity framework capabilities, such as cybersecurity engineering, vulnerability management, identity management, threat intel, prediction and detection, as well as response and recovery (Preferred)
• Expertise with OT domain specific cybersecurity vendors and tools, security evaluation processes and assessing risk & developing mitigation plans (Preferred).
• Must have direct knowledge and experience managing cybersecurity tools such as NDR, EDR, and SIEM.
• GICSP, GCIH, GPEN, CISSP, or equivalent, or other specific training or experience in cyber security operations, design, and engineering.
• Familiarity with standard principles and practices of cybersecurity design for safeguarded plants and facilities.
• Networking/IT systems engineering background and experience.
• Knowledge of Federal requirements for Cyber security for Critical Infrastructure Protection (CIP).
• Knowledge of IEEE and IEC standards related to cyber security in embedded system and control systems.
• Proficiency in developing and reviewing threat assessments and using results of those assessments to develop comprehensive cyber security designs.
• Proficiency developing cybersecurity programs, procedures, and processes.
• Understanding of nuclear engineering, licensing, regulatory, quality, and safety requirements preferred.
• Knowledge or experience in software engineering, software development, or utilization of a software development toolset.

Location: Oak Ridge, TN (outside of Knoxville)

Travel Expectations: potential 10% for project assignment or headquarters visit

Hours: 8:00am-5:00pm Monday through Friday

Work Site Expectations: 4 days a week in office

Compensation

As required by Maryland and other applicable state law, X Energy, LLC (X-energy) lists the expected compensation range for a publicly advertised job opportunity based upon the job requirements (e.g. education/training, experience, skill sets, etc.).  Individual candidates who meet the job requirements for the posted position will be offered a salary within this range based on their respective levels of education/training, experience, and other qualifications unique to them.  Salary ranges may vary based on the specific office location and region referenced in the posting to take into consideration differences in cost of living and may not be reflective of all regions.  Please note that compensation ranges listed for US job postings reflect base salary only and do not include benefits or other incentives. 

A reasonable estimate for this position at the level of experience required is:

$126,000- $161,000

Position Job Classification

Full time - Exempt

Benefits 

X Energy, LLC offers a robust benefits package that includes a 401K plan with an employer match, Medical/Dental /Vision Insurance, Life and Disability Insurance, Paid Time Off, and a Tuition Reimbursement/Professional Development policy that supports the continuing education of our employees. 

An Equal Opportunity Employer.  All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.   

X Energy, LLC participates in E-Verify. Please visit the links below for more information about E-Verify and the protection of your Right to Work. 

Right To Work Link:  If you have the right to work, don't let anyone take it away (e-verify.gov)

E-Verify Participation Link:  E-Verify Participation Poster English and Spanish