Senior Security Engineer

This is a unique opportunity to help secure a vital component of the nation's energy infrastructure. You will work on challenging, mission-critical cybersecurity initiatives with direct impact on operational resilience, public safety, and national security. The role offers significant technical ownership, exposure to cutting-edge security technologies, and the opportunity to protect some of the most critical systems in operation today.

As a Security Engineer, you will design, implement, and continuously improve security controls across corporate, product, cloud, air-gapped, and highly regulated environments. Working in a fast-paced, Skunkworks-style setting, you will partner cross-functionally with software, IT, manufacturing, nuclear, and operations teams to embed security from the ground up.

Key Responsibilities

• Security Architecture & Engineering: Design and maintain security controls across cloud, hybrid, air-gapped, and classified systems.
• Operations & Incident Response: Support monitoring, detection engineering, vulnerability management, remediation, and incident response.
• Identity & Access Management: Implement IAM and privileged access controls across workforce and production environments.
• Secure Development: Partner with engineering to embed application security and secure SDLC practices across hardware, firmware, and software.
• GRC & Licensing: Support policy implementation, risk assessments, audit readiness, NRC licensing, and classified facility accreditations.

Qualifications

• Experience: 5+ years of hands-on cybersecurity experience across infrastructure, product, cloud, or security operations.
• Environment: Proven track record in regulated or high-stakes settings (e.g., federal, defense, nuclear, classified, ITAR).
• Technical Domain: Strong knowledge of cloud/network/endpoint security, IAM, and security monitoring.
• Collaboration: Experience working cross-functionally to drive security improvements and manage incidents/vulnerabilities.

Preferred Skills & Experience

• Compliance Frameworks: Familiarity with NRC licensing, NIST 800-53, NIST 800-171, RMF, or STIGs.
• Specialized Systems: Experience with hardware/embedded security, industrial control systems (ICS/OT), or secure architectures for air-gapped systems.
• Modern Tools: Proficiency with DevSecOps, infrastructure-as-code security, automation, and detection engineering.
• Communication: Ability to clearly translate complex security risks and tradeoffs for both technical and non-technical stakeholders.