X-energy LLC conducts a thorough recruiting process and will never issue offers without interview to discuss qualifications and responsibilities. All applications will be submitted via our company career page, www.x-energy.com/careers/. We will never ask you to provide payment information as part of the recruiting process. If anyone claiming to represent X-energy directs you in a manner otherwise, please contact us at www.x-energy.com/contact-us.
Job Description
Provide security engineering support, cyber-informed engineering support, and DevOps lifecycle management from a security perspective as a mid-level (Level IV) engineer. Lead the integration of security practices into development and operations workflows leveraging AWS cloud infrastructure and GitLab platforms to ensure security is embedded throughout the SDLC and OT environments. This position requires immediate impact and the ability to execute independently from day one, with extensive foundational knowledge in AWS security services, infrastructure-as-code, and CI/CD pipeline security. The ideal candidate will bring proven AWS expertise and GitLab proficiency gained across diverse enterprise environments.
Job Profile Tasks/Responsibilities
- Support the design, implementation, and maintenance of secure CI/CD pipelines incorporating security scanning, vulnerability assessment, and compliance validation
- Integrate security tools and practices into DevOps workflows, including SAST, DAST, SCA, container security, and infrastructure‑as‑code scanning
- Contribute to cyber‑informed engineering by embedding security requirements into system design, architecture decisions, and operational technology environments under guidance of senior engineers
- Develop and maintain security automation scripts, tools, and frameworks to enhance detection, response, and remediation capabilities
- Collaborate with development teams to implement secure coding practices, conduct security code reviews, and provide remediation guidance with moderate independence
- Assist in designing and implementing infrastructure security controls across AWS, including identity management, network segmentation, and secrets management
- Support security incident response activities by providing technical expertise in forensic analysis, root cause determination, and remediation implementation
- Contribute to establishing and maintaining security metrics, dashboards, and reporting mechanisms to track security posture across development and production environments
- Support development and maintenance of documentation for security processes, procedures, and architectural decisions
- Maintain professional demeanor and behavior at all times in all forms of communication
- Perform other duties as assigned by manager
Job Profile Minimum Qualifications
Bachelor’s degree in Computer Science, Cybersecurity, or related field; 3+ years DevOps/security experience; 1–2 years DevSecOps experience
- Security+ or equivalent; Certified DevSecOps Professional (CDP) (Required/Preferred)
- CISSP, CISM, AWS Security Specialty, Azure Security Engineer, or CKS (Preferred/Optional)
Skills for this role are typically demonstrated by approximately 8–10 years of relevant experience
U.S. Citizenship and ability to obtain a Secret security clearance.
Job Profile Preferred Qualifications
- AWS Certified Security – Specialty (strongly preferred; certification demonstrates hands-on AWS security expertise)
- AWS Solutions Architect – Associate or Professional certification demonstrating broad AWS architectural knowledge
- Extensive hands-on experience with AWS security services, including but not limited to: AWS IAM, Security Groups, NACLs, AWS GuardDuty, AWS Security Hub, AWS Config, AWS CloudTrail, AWS KMS, AWS Secrets Manager, AWS WAF, AWS Shield, and VPC security architecture
- Deep proficiency with AWS infrastructure-as-code tools including CloudFormation, AWS CDK, and Terraform for AWS deployments
- Strong experience with GitLab CI/CD pipelines, including GitLab Runner configuration, pipeline security, artifact management, and GitLab security scanning features (SAST, DAST, container scanning, dependency scanning)
- Demonstrated ability to architect and implement AWS-native security controls for containerized workloads (ECS, EKS) and serverless architectures (Lambda, API Gateway)
- Experience implementing security automation and orchestration using AWS Lambda, Step Functions, EventBridge, and Systems Manager
- Proficiency with AWS monitoring and logging for security operations using CloudWatch, CloudWatch Logs Insights, and integration with SIEM platforms
- Proven track record of securing AWS network architectures, including Transit Gateway, PrivateLink, VPN, and Direct Connect configurations
- Experience with GitLab administrative functions, including user/group management, compliance frameworks, security policies, and merge request approval workflows
- Diverse enterprise experience across multiple organizational types (private companies, public companies, startups) demonstrating adaptability to different security postures, compliance requirements, and operational tempos
- Experience with AWS compliance frameworks (SOC 2, FedRAMP, PCI-DSS, NIST) and implementation of AWS-native compliance controls
- Hands-on experience with containerization security in AWS environments, including Docker security hardening, ECR image scanning, and Kubernetes (EKS) security best practices
- Proficiency in scripting and automation using Python, Bash, or PowerShell specifically for AWS security operations and GitLab pipeline integration
- Experience implementing policy-as-code using AWS Organizations, Service Control Policies (SCPs), and IAM policy evaluation
- Proven ability to mentor and guide development teams on AWS security best practices and secure GitLab workflows with minimal oversight
Location: 530 Gaither Road, Rockville, MD
Work Site Expectations: Hybrid & Remote Eligible, Travel % increased if remote
Travel Expectations: Up to 10% as needed for project assignment
Hours: Standard office hours are 8:00am-5:00pm ET, Monday-Friday
Compensation
As required by Maryland and other applicable state law, X Energy, LLC (X-energy) lists the expected compensation range for a publicly advertised job opportunity based upon the job requirements (e.g. education/training, experience, skill sets, etc.). Individual candidates who meet the job requirements for the posted position will be offered a salary within this range based on their respective levels of education/training, experience, and other qualifications unique to them. Salary ranges may vary based on the specific office location and region referenced in the posting to take into consideration differences in cost of living and may not be reflective of all regions. Please note that compensation ranges listed for US job postings reflect base salary only and do not include benefits or other incentives.
Offers within the posted salary range are commensurate with the individual’s qualifications for the position, along with a view on internal equity, market data, and room for growth. The salary range for this position is:
$160,000 - $185,000
Position Job Classification
Full time - Exempt
Benefits
X Energy, LLC offers a robust benefits package that includes a 401K plan with an employer match, Medical/Dental /Vision Insurance, Life and Disability Insurance, Paid Time Off, and a Tuition Reimbursement/Professional Development policy that supports the continuing education of our employees.
An Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.
X Energy, LLC participates in E-Verify. Please visit the links below for more information about E-Verify and the protection of your Right to Work.
Right To Work Link: If you have the right to work, don't let anyone take it away (e-verify.gov)
E-Verify Participation Link: E-Verify Participation Poster English and Spanish
