Engineer IV, Cybersecurity at X-energy in Rockville, MD

Job description

X-energy LLC conducts a thorough recruiting process and will never issue offers without interview to discuss qualifications and responsibilities. All applications will be submitted via our company career page, www.x-energy.com/careers/ . We will never ask you to provide payment information as part of the recruiting process. If anyone claiming to represent X-energy directs you in a manner otherwise, please contact us at www.x-energy.com/contact-us . Job Description This role is responsible for developing, implementing, and maintaining key cybersecurity technologies across both X-energy corporate and TRISO fuel facility operations, including Endpoint Detection and Response (EDR), Network Detection and Response (NDR), Security Information and Event Management (SIEM), and Security Orchestration, Automation, and Response (SOAR). The position serves as a critical bridge between corporate IT infrastructure and the TRISO fuel facility, conducting software evaluations, performing architecture reviews, and identifying and addressing cybersecurity gaps between the two environments. In addition to the tooling and operations duties, this role leads structured threat modeling and cyber evaluation activities. The analyst applies established methodologies such as STRIDE to identify, categorize, and prioritize threats across systems, data flows, and trust boundaries spanning the corporate and TRISO fuel facility environments. This includes facilitating threat modeling sessions during architecture reviews and software evaluations, translating identified threats into actionable mitigations, and reassessing threat models as architectures evolve to ensure security gaps between environments are documented, tracked, and remediated. Responsibilities include conducting proactive threat hunts, monitoring endpoint and network data, collecting and analyzing digital forensic artifacts including malware, coordinating with the Xe infrastructure team, and meeting with technology vendors to evaluate solutions that support enterprise-wide security objectives. Job Profile Tasks/Responsibilities EDR, NDR, SIEM, and SOAR Implementation: Design, implement, and maintain EDR, NDR, SIEM, and SOAR systems. Configure and optimize security tools to improve detection capabilities and response times. Threat Hunting: Conduct proactive threat hunting activities to identify potential vulnerabilities and threats. Utilize advanced analytical techniques to uncover hidden threats within the environment. Monitoring and Analysis: Monitor endpoint and network data for anomalies and suspicious activities. Analyze security alerts and incidents to determine the nature and scope of threats. Digital Forensics: Collect and analyze digital forensic artifacts from compromised systems. Investigate malware and conduct reverse engineering to understand threat behavior. Collaboration and Reporting: Collaborate with IT and security teams to improve overall security posture. Prepare detailed reports on security incidents, findings, and recommendations for management. Maintain professional demeanor and behavior at all times in all forms of communication. Perform other duties as assigned by manager. Lead the execution of the core tasks and responsibilities, listed in the Job Profile Task/Responsibilities section of this document, without close supervision and some latitude for independent judgment. Lead the deployment of security technologies and conduct in-depth analysis of threats. Provide feedback and guidance to more junior team members with the execution of the core tasks and responsibilities listed in the Job Profile Task/Responsibilities section of this document. Shares knowledge related to industry best practices and standards with others across the team. Job Profile Minimum Qualifications High school diploma required. Basic understanding of EDR, NDR, SIEM, and SOAR technologies. Ability to obtain and maintain a SECRET clearance or higher (U.S. citizenship required). Typically, 10 years of