Cybersecurity GRC Engineer

In this role, you will support cybersecurity Governance, Risk, and Compliance (GRC) practices for nuclear facility design and engineering, with a focus on the Xe-100 advanced nuclear reactor. You will help integrate cybersecurity requirements, risk management, and regulatory compliance across IT and OT systems throughout the plant lifecycle.

Location and Work Arrangement

Gaithersburg, MD (hybrid)

Salary and Employment Type

• Salary: USD 112,500 to 128,250 per year
• Classification: Full time, Exempt
• Compensation note: Compensation ranges listed for US job postings reflect base salary only and do not include benefits or other incentives.

Key Responsibilities

• Execute advanced threat hunting activities using known adversary tactics, techniques, and procedures, along with indicators of attack to detect adversaries.
• Develop threat intelligence capabilities to detect, respond to, and help defeat advanced persistent threats (APTs).
• Develop and produce reports on activities and incidents to maintain day-to-day status, track and report trends, and provide situational awareness.
• Identify and remediate control weaknesses.
• Review data with firewall administrators, engineering, system administrators, and other relevant teams to determine the risk associated with security events.
• Perform complex, senior-level information security analysis.
• Develop and recommend safeguarding plans for computer, server, network configurations, and data files to prevent accidental or unauthorized modification, destruction, or disclosure, including support for emergency data processing needs.
• Execute performance and reviews of technical risk assessments for both new and existing applications.
• Develop and implement systems and procedures to prevent, detect, contain, and correct data security breaches.
• Maintain a professional demeanor and behavior in all forms of communication.
• Perform other duties as assigned by the manager.

Required Qualifications

• Education: High school diploma or equivalent
• Experience: Typically 5 years of experience in a cybersecurity role
• Knowledge of ServiceNow platform capabilities, modules, and best practices
• Experience in ServiceNow development and architecture
• Familiarity with ITIL processes and service management principles
• Technical skills including scripting, workflow configuration, and business rule development
• Ability to independently design and lead complex user interfaces, integrations, and workflows
• Proficiency in JavaScript, AngularJS, HTML, CSS, and ServiceNow Glide API
• Knowledge and experience managing cybersecurity tools such as NDR, EDR, and SIEM
• Experience with Azure and AWS
• One or more of the following certifications is required: CISSP, CISA, GIAC (Global Information Assurance Certification), GCIH, GPEN, GICSP, or equivalent
• Identity and Access Management technologies including Federation, Multi-Factor Authentication (MFA), and Public Key Infrastructure (PKI)
• Cloud technologies including AWS, Azure, Docker, Kubernetes, and DevSecOps
• Networking, firewall, and software-defined networking
• Ability to integrate cybersecurity tools to support an enterprise-level cybersecurity program
• Leveraging Artificial Intelligence (AI), Machine Learning (ML), and Orchestration to secure the environment

Tools and Technologies

• ServiceNow
• ITIL
• JavaScript
• AngularJS
• HTML
• CSS
• ServiceNow Glide API
• NDR
• EDR
• SIEM
• Azure
• AWS
• Federation
• Multi-Factor Authentication (MFA)
• Public Key Infrastructure (PKI)
• Docker
• Kubernetes
• DevSecOps
• Artificial Intelligence (AI)
• Machine Learning (ML)

Benefits

• 401K plan with an employer match
• Medical/Dental/Vision Insurance
• Life and Disability Insurance
• Paid Time Off
• Tuition Reimbursement/Professional Development policy