IT Security Analyst II (Nuclear Energy)

Location: Alameda, CA; Albuquerque, NM; Oak Ridge, TN; or Remote. The role supports a multi-site hybrid IT environment, may require approximately 5% travel, occasional weekends and extended hours, and includes work in office, prototyping/test, manufacturing, and industrial environments. Work may involve access to DOE Part 810-controlled information; authorization requirements apply.

Salary: $108,735–$127,923 annually for employees working onsite at the Alameda, CA headquarters.

Company

hirify.global develops fluoride-salt-cooled, high-temperature reactor technology to support the transition to clean energy.

What you will do

• Monitor and analyze activity across networks, systems, cloud platforms, and SaaS applications for suspicious activity and potential incidents.
• Configure and onboard systems and appliances into the enterprise SIEM, validate log collection, and support detection and investigation capabilities.
• Investigate SIEM, endpoint, firewall, identity, and access alerts; document incidents; coordinate containment, remediation, recovery, and escalation.
• Perform vulnerability scanning, analysis, prioritization, reporting, and remediation tracking through closure.
• Administer and monitor security controls covering firewalls, endpoint protection, encryption, identity and access management, MFA, and secure remote access.
• Support security policies, audits, compliance reviews, control assessments, evidence collection, security awareness, documentation, metrics, and coordination with infrastructure teams, business stakeholders, vendors, and managed service providers.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or an equivalent combination of education, certifications, training, and applicable experience.
• 4+ years of relevant experience in IT security, cybersecurity operations, security operations, or a closely related technical security role.
• Hands-on experience analyzing security events and alerts with SIEM platforms, endpoint detection and response tools, vulnerability scanners, firewalls, and ticketing systems.
• Experience supporting Microsoft 365, Entra ID, SSO, MFA, endpoint management, identity and access technologies, or zero-trust initiatives.
• Experience supporting vulnerability management, security incident response, or security control administration.
• Working knowledge of networking, endpoint security, identity and access management, cloud services, cybersecurity controls, incident response, vulnerability analysis, remediation prioritization, and security metrics.
• Ability to independently analyze routine and moderately complex alerts, assess risk, prioritize remediation, administer assigned controls, maintain audit-ready documentation, and manage multiple priorities.
• Ability to collaborate with technical and non-technical stakeholders and communicate cybersecurity risks, findings, and remediation requirements effectively.

Nice to have

• Familiarity with NIST 800-171, CMMC, ISO 27001, or similar security frameworks.
• Professional certifications such as Security+, CySA+, GSEC, SSCP, Microsoft security certifications, or similar.
• Experience in a highly regulated industry, government contractor environment, engineering organization, industrial or manufacturing company, energy company, or high-growth environment.

Culture & Benefits

• Full-time employment with medical, dental, and vision benefits for employees and dependents.
• Paid vacation.
• 401(k), pre-tax health insurance, dependent care, and commuter benefits through FSA programs.
• Equal opportunity workplace focused on building a diverse workforce.
• General office, prototyping/test, manufacturing, and industrial work environments; required PPE may include masks, face shields, gloves, and safety shoes.