Analyst III, Cybersecurity

Cyber Focus AII's mission is to help cybersecurity professionals discover cutting-edge opportunities in their field. We are not a staffing firm or agency. Cyber Focus AI does not hire for these roles—we use advanced technology to locate and verify them from actual employers.

X-energy LLC conducts a thorough recruiting process and will never issue offers without interview to discuss qualifications and responsibilities. All applications will be submitted via our company career page, www.x-energy.com/careers/. We will never ask you to provide payment information as part of the recruiting process. If anyone claiming to represent X-energy directs you in a manner otherwise, please contact us at www.x-energy.com/contact-us.

Job Description

This role is responsible for safeguarding the organization's digital assets by monitoring, responding to, and investigating suspected cyber threats and malicious activities across multiple environments. The analyst plays a critical role in evaluating and implementing security tooling solutions, managing third-party risk assessments, and supporting vendor management activities. This position involves triage and data collection to support effective threat response and remediation, while collaborating with cross-functional teams to design and implement robust risk management, security, and governance programs. The analyst conducts software evaluations to ensure selected tools align with organizational security objectives and assists in establishing vendor security standards to ensure compliance with industry standards and regulatory requirements.

Job Profile Tasks/Responsibilities

• Execute risk management programs through planning, developing, coordinating, and implementing information technology disaster recovery and business continuity planning.
• Perform, assist, and review technical risk assessments and reviews of new and existing applications and systems, networks, servers, including data center physical security and environmental controls.
• Assist in conducting IT audits to ensure information systems security policies and procedures are being implemented as defined in security plans and best practices.
• Perform basic analyses to validate established security requirements and may recommend additional security requirements and safeguards.
• Prepare technical and security reports by collecting, analyzing, and summarizing project information.
• Monitor project progress by tracking activity, resolving problems, publishing progress reports, recommending actions.
• Develop and recommend plans to safeguard computer/server/network configurations and data files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
• Support and manage information security and risk management awareness and training programs.
• Assist with reviews of special investigations, internal audits, research studies to provide direction and guidance.
• Work with team members to design and oversee server-side elements of network infrastructure, including installing network-wide malware protection software, configuring firewalls, and configuring databases and access on the back end.
• Analyze vulnerability scans of information systems and assist in remediation tasks.
• Maintain professional demeanor and behavior at all times in all forms of communication.
• Perform other duties as assigned by manager.
• Execute the core tasks and responsibilities, listed in the Job Profile Task/Responsibilities section of this document, with minimal supervision.

Job Profile Minimum Qualifications

• Bachelor's degree in computer science, Information Technology, or a related field.
• Basic understanding of cybersecurity principles and tools.
• Familiarity with networking concepts and security protocols.
• Typically, five years of experience in a Cybersecurity role required.
• Certifications such as CompTIA Security+, CEH, or equivalent.
• Knowledge of SIEM tools and incident response procedures.
• Knowledge of relevant regulations and compliance frameworks (e.g., NIST, ISO 27001).

Job Profile Preferred Qualifications

• Hands-on experience with security platforms including Tenable (vulnerability management), Splunk (SIEM/log analysis), CrowdStrike (endpoint detection and response), and enterprise Governance, Risk, and Compliance (GRC) platforms
• Demonstrated experience in third-party risk management (TPRM), including vendor security assessments, risk scoring, and ongoing monitoring
• Proven track record conducting software evaluations and tool assessments to support security program needs
• Experience with vendor management activities, including security questionnaire review, contract security requirements, and vendor onboarding processes
• Familiarity with vendor risk assessment frameworks and methodologies (e.g., SIG, CAIQ, custom questionnaires)
• Experience managing relationships with third-party vendors and service providers from a security perspective #CyberFocusAI