Security Engineer

Responsibilities

• Design, implement, and maintain security controls across product, infrastructure, corporate, and regulated environments.
• Secure cloud, on-prem, air-gapped, and classified systems in alignment with NRC, federal, and internal security requirements.
• Support security operations, including monitoring, detection engineering, incident response, vulnerability management, and remediation tracking.
• Implement and improve identity and access management controls across workforce systems, production environments, and privileged access workflows.
• Partner with engineering teams to embed application security and secure SDLC practices across hardware, firmware, and software development.
• Contribute to GRC efforts, including policy implementation, risk assessments, audit readiness, NRC licensing support, and classified facility accreditation preparation.

Requirements

• 5+ years of hands-on cybersecurity experience across infrastructure, product, cloud, or security operations domains.
• Practical experience implementing security controls in production or high-stakes environments.
• Experience working in regulated environments such as federal, defense, nuclear, classified, ITAR, or similarly controlled settings.
• Strong technical knowledge of cloud security, network security, endpoint security, IAM, and security monitoring.
• Experience supporting incident response, vulnerability management, or security event investigation in operational environments.
• Ability to work cross-functionally with engineering, IT, compliance, and operations teams to drive security improvements.

Qualifications

• Basic Qualifications: 5+ years of hands-on cybersecurity experience across infrastructure, product, cloud, or security operations domains.
• Practical experience implementing security controls in production or high-stakes environments.
• Experience working in regulated environments such as federal, defense, nuclear, classified, ITAR, or similarly controlled settings.
• Strong technical knowledge of cloud security, network security, endpoint security, IAM, and security monitoring.
• Experience supporting incident response, vulnerability management, or security event investigation in operational environments.
• Ability to work cross-functionally with engineering, IT, compliance, and operations teams to drive security improvements.

Preferred Skills And Experience

• Experience supporting NRC licensing, classified facility buildouts, or federal frameworks such as NIST 800-53, NIST 800-171, RMF, or STIGs.
• Familiarity with hardware security, embedded systems, industrial control systems, or operational technology environments.
• Experience designing or operating secure architectures for hybrid cloud, air-gapped, or highly restricted systems.
• Fluency with modern DevSecOps tooling, detection engineering, infrastructure-as-code security, and automation.
• Experience contributing to security policies, control documentation, audits, or compliance evidence collection.
• Strong written and verbal communication skills, with the ability to explain security risks and tradeoffs to technical and non-technical stakeholders.

Pay

The base salary range for this role is $100,000–$180,000 annually. Compensation bands are determined by role, level, location, and alignment with market data. Individual level and base pay is determined on a case-by-case basis and may vary based on job-related skills, education, experience, technical capabilities and internal equity.

Benefits

• In addition to base salary, for full-time hires, you may also be eligible for long-term incentives, in the form of stock options, and access to medical, vision & dental coverage as well as access to a 401(k) retirement plan.