Engineer IV, Cyber DevSecOps

X-energy LLC conducts a thorough recruiting process and will never issue offers without interview to discuss qualifications and responsibilities. All applications will be submitted via our company career page, . We will never ask you to provide payment information as part of the recruiting process. If anyone claiming to represent X-energy directs you in a manner otherwise, please contact us at .Job DescriptionProvide security engineering support, cyber-informed engineering support, and DevOps lifecycle management from a security perspective as a mid-level (Level IV) engineer. Lead the integration of security practices into development and operations workflows leveraging AWS cloud infrastructure and GitLab platforms to ensure security is embedded throughout the SDLC and OT environments. This position requires immediate impact and the ability to execute independently from day one, with extensive foundational knowledge in AWS security services, infrastructure-as-code, and CI/CD pipeline security. The ideal candidate will bring proven AWS expertise and GitLab proficiency gained across diverse enterprise environments.Job Profile Tasks/ResponsibilitiesSupport the design, implementation, and maintenance of secure CI/CD pipelines incorporating security scanning, vulnerability assessment, and compliance validationIntegrate security tools and practices into DevOps workflows, including SAST, DAST, SCA, container security, and infrastructure‑as‑code scanningContribute to cyber‑informed engineering by embedding security requirements into system design, architecture decisions, and operational technology environments under guidance of senior engineersDevelop and maintain security automation scripts, tools, and frameworks to enhance detection, response, and remediation capabilitiesCollaborate with development teams to implement secure coding practices, conduct security code reviews, and provide remediation guidance with moderate independenceAssist in designing and implementing infrastructure security controls across AWS, including identity management, network segmentation, and secrets managementSupport security incident response activities by providing technical expertise in forensic analysis, root cause determination, and remediation implementationContribute to establishing and maintaining security metrics, dashboards, and reporting mechanisms to track security posture across development and production environmentsSupport development and maintenance of documentation for security processes, procedures, and architectural decisionsMaintain professional demeanor and behavior at all times in all forms of communicationPerform other duties as assigned by manager​Job Profile Minimum QualificationsBachelor’s degree in Computer Science, Cybersecurity, or related field; 3+ years DevOps/security experience; 1–2 years DevSecOps experienceSecurity+ or equivalent; Certified DevSecOps Professional (CDP) (Required/Preferred)CISSP, CISM, AWS Security Specialty, Azure Security Engineer, or CKS (Preferred/Optional)Skills for this role are typically demonstrated by approximately 8–10 years of relevant experienceU.S. Citizenship and ability to obtain a Secret security clearance.Job Profile Preferred QualificationsAWS Certified Security – Specialty (strongly preferred; certification demonstrates hands-on AWS security expertise)AWS Solutions Architect – Associate or Professional certification demonstrating broad AWS architectural knowledgeExtensive hands-on experience with AWS security services, including but not limited to: AWS IAM, Security Groups, NACLs, AWS GuardDuty, AWS Security Hub, AWS Config, AWS CloudTrail, AWS KMS, AWS Secrets Manager, AWS WAF, AWS Shield, and VPC security architectureDeep proficiency with AWS infrastructure-as-code tools including CloudFormation, AWS CDK, and Terraform for AWS deploymentsStrong experience with GitLab CI/CD pipelines, including GitLab Runner configuration, pipeline security, artifact management, and GitLab security scanning features (SAST, DAST, container scanning, dependency scanning)Demonstrated ability to architect and implement AWS-native security controls for containerized workloads (ECS, EKS) and serverless architectures (Lambda, API Gateway)Experience implementing security automation and orchestration using AWS Lambda, Step Functions, EventBridge, and Systems ManagerProficiency with AWS monitoring and logging for security operations using CloudWatch, CloudWatch Logs Insights, and integration with SIEM platformsProven track record of securing AWS network architectures, including Transit Gateway, PrivateLink, VPN, and Direct Connect configurationsExperience with GitLab administrative functions, including user/group management, compliance frameworks, security policies, and merge request approval workflowsDiverse enterprise experience across multiple organizational types (private companies, public companies, startups) demonstrating adaptability to different security postures, compliance requirements, and operational temposExperience with AWS compliance frameworks (SOC 2, FedRAMP, PCI-DSS, NIST) and implementation of AWS-native compliance controlsHands-on experience with containerization security in AWS environments, including Docker security hardening, ECR image scanning, and Kubernetes (EKS) security best practicesProficiency in scripting and automation using Python, Bash, or PowerShell specifically for AWS security operations and GitLab pipeline integrationExperience implementing policy-as-code using AWS Organizations, Service Control Policies (SCPs), and IAM policy evaluationProven ability to mentor and guide development teams on AWS security best practices and secure GitLab workflows with minimal oversightLocation: 530 Gaither Road, Rockville, MDWork Site Expectations: Hybrid & Remote Eligible, Travel % increased if remoteTravel Expectations: Up to 10% as needed for project assignmentHours: Standard office hours are 8:00am-5:00pm ET, Monday-FridayCompensationAs required by Maryland and other applicable state law, X Energy, LLC (X-energy) lists the expected compensation range for a publicly advertised job opportunity based upon the job requirements (e.g. education/training, experience, skill sets, etc.). Individual candidates who meet the job requirements for the posted position will be offered a salary within this range based on their respective levels of education/training, experience, and other qualifications unique to them. Salary ranges may vary based on the specific office location and region referenced in the posting to take into consideration differences in cost of living and may not be reflective of all regions. Please note that compensation ranges listed for US job postings reflect base salary only and do not include benefits or other incentives.Offers within the posted salary range are commensurate with the individual’s qualifications for the position, along with a view on internal equity, market data, and room for growth. The salary range for this position is:$160,000 - $185,000Position Job ClassificationFull time - ExemptBenefitsX Energy, LLC offers a robust benefits package that includes a 401K plan with an employer match, Medical/Dental /Vision Insurance, Life and Disability Insurance, Paid Time Off, and a Tuition Reimbursement/Professional Development policy that supports the continuing education of our employees. An Equal Opportunity Employer.  All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.X Energy, LLC participates in E-Verify. Please visit the links below for more information about E-Verify and the protection of your Right to Work.Right To Work Link: If you have the right to work, don't let anyone take it away (e-verify.gov)E-Verify Participation Link: E-Verify Participation Poster English and SpanishSummaryLocation: Rockville, MDType: Full time