IT Security Analyst
Kairos Power is hiring an IT Security Analyst II to secure its multi-site, hybrid corporate IT environment — performing SIEM monitoring, incident response, vulnerability management, and compliance work (e.g., NIST 800-171/CMMC). Day-to-day is hands-on with firewalls, EDR, Microsoft 365/Entra ID, MFA, and access controls, onsite or remote.
- Compensation
- $108.7K–$127.9K / yr
- Location
- Alameda, CA, Albuquerque, NM, Oak Ridge, TN or Remote
- Work setup
- Remote
- Seniority
- Not specified
- Employment
- Contract
- Experience
- 4+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in Computer Science, IT, Cybersecurity, or related field, or equivalent education/experience
- 4+ years of experience in IT security, cybersecurity operations, or related technical security role
- Hands-on experience with SIEM platforms, EDR tools, vulnerability scanners, firewalls, and ticketing systems
- Experience with Microsoft 365, Entra ID, SSO, MFA, endpoint management, or zero-trust initiatives
- Experience supporting vulnerability management, security incident response, or security control administration
- Working knowledge of networking, endpoint security, identity and access management, cloud services, and common security controls
- Authorization to access DOE Part 810 export-controlled information
Nice to have
- Familiarity with security frameworks such as NIST 800-171, CMMC, or ISO 27001
- Professional certifications such as Security+, CySA+, GSEC, SSCP, or similar
- Prior experience in a highly regulated industry, government contractor, industrial/manufacturing, or energy company
- Prior experience in a high-growth or rapidly scaling environment
Full description
Company Overview
Kairos Power is a new nuclear energy technology and engineering company whose mission is to enable the world’s transition to clean energy, with the ultimate goal to dramatically improve people’s quality of life while protecting the environment. This goal will be accomplished through the commercialization of the fluoride-salt-cooled, high-temperature reactor (FHR) that can be deployed with robust safety, affordable costs, and flexible operation to accommodate the expansion of variable renewables.
Job Summary
We are searching for an IT Security Analyst II to support and strengthen the security, monitoring, and compliance of our multi-site, hybrid corporate IT infrastructure, on-premises systems, and SaaS application platforms. This role will independently perform security monitoring, vulnerability management, incident response, policy and control administration, and compliance activities within established cybersecurity programs and procedures. The role will collaborate with IT infrastructure, application owners, business teams, and external service providers to identify, assess, and remediate cybersecurity risks. The ideal candidate will have hands-on cybersecurity operations experience in a medium- or enterprise-scale environment, preferably within a highly regulated industry or an organization subject to NIST 800-171, CMMC, or similar security frameworks.
Responsibilities
- Independently monitor and analyze activity across computer networks, systems, cloud platforms, and SaaS applications for suspicious activity and potential security incidents.
- Configure and onboard supported IT systems and appliances into the enterprise SIEM, including validating log collection and supporting detection and investigation capabilities.
- Analyze, investigate, and respond to SIEM, endpoint protection, firewall, identity, and access management alerts, escalating complex or high-risk events as appropriate.
- Investigate and document routine and moderately complex security incidents; coordinate containment and remediation activities and escalate as appropriate.
- Perform vulnerability management activities, including scanning, analysis, prioritization, reporting, and remediation tracking through closure.
- Work with IT infrastructure teams to identify, assess, prioritize, and resolve network, endpoint, cloud, and application security risks.
- Apply and support the maintenance and enforcement of internal IT security policies and procedures, including data handling, acceptable use, access control, and incident response.
- Perform assigned audit, compliance review, evidence collection, and control assessment activities against applicable regulatory frameworks.
- Administer and monitor assigned security controls for firewalls, endpoint protection, encryption, identity and access management, multi-factor authentication, and secure remote access.