IT Security Analyst

The posting, as Kairos Power wrote it

Company Overview

Kairos Power is a new nuclear energy technology and engineering company whose mission is to enable the world’s transition to clean energy, with the ultimate goal to dramatically improve people’s quality of life while protecting the environment. This goal will be accomplished through the commercialization of the fluoride-salt-cooled, high-temperature reactor (FHR) that can be deployed with robust safety, affordable costs, and flexible operation to accommodate the expansion of variable renewables.

Job Summary

We are searching for an IT Security Analyst II to support and strengthen the security, monitoring, and compliance of our multi-site, hybrid corporate IT infrastructure, on-premises systems, and SaaS application platforms. This role will independently perform security monitoring, vulnerability management, incident response, policy and control administration, and compliance activities within established cybersecurity programs and procedures. The role will collaborate with IT infrastructure, application owners, business teams, and external service providers to identify, assess, and remediate cybersecurity risks. The ideal candidate will have hands-on cybersecurity operations experience in a medium- or enterprise-scale environment, preferably within a highly regulated industry or an organization subject to NIST 800-171, CMMC, or similar security frameworks.

Responsibilities

• Independently monitor and analyze activity across computer networks, systems, cloud platforms, and SaaS applications for suspicious activity and potential security incidents.
• Configure and onboard supported IT systems and appliances into the enterprise SIEM, including validating log collection and supporting detection and investigation capabilities.
• Analyze, investigate, and respond to SIEM, endpoint protection, firewall, identity, and access management alerts, escalating complex or high-risk events as appropriate.
• Investigate and document routine and moderately complex security incidents; coordinate containment and remediation activities and escalate as appropriate.
• Perform vulnerability management activities, including scanning, analysis, prioritization, reporting, and remediation tracking through closure.
• Work with IT infrastructure teams to identify, assess, prioritize, and resolve network, endpoint, cloud, and application security risks.
• Apply and support the maintenance and enforcement of internal IT security policies and procedures, including data handling, acceptable use, access control, and incident response.
• Perform assigned audit, compliance review, evidence collection, and control assessment activities against applicable regulatory frameworks.
• Administer and monitor assigned security controls for firewalls, endpoint protection, encryption, identity and access management, multi-factor authentication, and secure remote access.
• Review user access, permissions, and privileged accounts to enforce least-privilege and

[…]
lary may include your education, experience, knowledge, skills, ability and the market data for your work location, and a comparison to other employees already in the role.

#LI-Remote

About our Benefits

We know that we have some of the most talented and dedicated employees, and we believe in rewarding them accordingly. If you work here, full-time employees (excludes interns) expect to have access to the benefits below:

• Competitive compensation packages
• Medical, dental and vision benefits for employees and their dependents
• Paid Vacation
• 401(k) and pre-tax health insurance, dependent care, and commuter benefits (FSA)

Kairos Power is committed to building a diverse workforce that reflects the communities where we do business. Kairos Power is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. We actively welcome people of different experiences, abilities, and perspectives.

Kairos Power participates in E-Verify.

Candidates only, no recruiters or agencies please.

Note: You are applying for a position that is located in a facility that handles information that is subject to export control restrictions by the Department of Energy under 10 CFR Part 810. To work in this facility, you need to be authorized by the Department of Energy to access Part 810-controlled information. Foreign nationals who are citizens of countries that are not on the Department of Energy’s general authorization list (link below) are not permitted to work in our facility unless the Department of Energy issues an export control license to the company to permit that individual to have access to Part 810-controlled information. The following questions are intended to determine the licensing requirements that may apply. https://www.law.cornell.edu/cfr/text/10/appendix-A_to_part_810