{"id":3014854,"url":"https://alion.io/job/kairos-power-it-security-analyst","title":"IT Security Analyst","company":{"id":97164,"name":"Kairos Power","domain":"kairospower.com","url":"https://alion.io/company/kairospower","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":83,"open_postings":6,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":200,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Alameda, United States","Albuquerque, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":108735,"max":127923,"currency":"USD","period":"year","gross":null,"usd_annual":127923},"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CMMC","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"NIST 800-171","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-21T16:12:47Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-23T03:02:35Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Company Overview\nKairos Power is a new nuclear energy technology and engineering company whose mission is to enable the world’s transition to clean energy, with the ultimate goal to dramatically improve people’s quality of life while protecting the environment. This goal will be accomplished through the commercialization of the fluoride-salt-cooled, high-temperature reactor (FHR) that can be deployed with robust safety, affordable costs, and flexible operation to accommodate the expansion of variable renewables.\nJob Summary\nWe are searching for an IT Security Analyst II to support and strengthen the security, monitoring, and compliance of our multi-site, hybrid corporate IT infrastructure, on-premises systems, and SaaS application platforms. This role will independently perform security monitoring, vulnerability management, incident response, policy and control administration, and compliance activities within established cybersecurity programs and procedures. The role will collaborate with IT infrastructure, application owners, business teams, and external service providers to identify, assess, and remediate cybersecurity risks. The ideal candidate will have hands-on cybersecurity operations experience in a medium- or enterprise-scale environment, preferably within a highly regulated industry or an organization subject to NIST 800-171, CMMC, or similar security frameworks.\n\nResponsibilities\nIndependently monitor and analyze activity across computer networks, systems, cloud platforms, and SaaS applications for suspicious activity and potential security incidents.\nConfigure and onboard supported IT systems and appliances into the enterprise SIEM, including validating log collection and supporting detection and investigation capabilities.\nAnalyze, investigate, and respond to SIEM, endpoint protection, firewall, identity, and access management alerts, escalating complex or high-risk events as appropriate.\nInvestigate and document routine and moderately complex security incidents; coordinate containment and remediation activities and escalate as appropriate.\nPerform vulnerability management activities, including scanning, analysis, prioritization, reporting, and remediation tracking through closure.\nWork with IT infrastructure teams to identify, assess, prioritize, and resolve network, endpoint, cloud, and application security risks.\nApply and support the maintenance and enforcement of internal IT security policies and procedures, including data handling, acceptable use, access control, and incident response.\nPerform assigned audit, compliance review, evidence collection, and control assessment activities against applicable regulatory frameworks.\nAdminister and monitor assigned security controls for firewalls, endpoint protection, encryption, identity and access management, multi-factor authentication, and secure remote access.\nReview user access, permissions, and privileged accounts to enforce least-privilege and zero-trust principles.\nSupport security awareness initiatives and reinforce cybersecurity best practices across the organization.\nMaintain accurate documentation of security incidents, risks, procedures, control evidence, and remediation activities.\nCoordinate assigned security activities with third-party cybersecurity vendors and managed service providers.\nMonitor developments in current cybersecurity threats, vulnerabilities, trends, and regulatory requirements.\nDevelop and maintain metrics and reports on security alerts, vulnerabilities, incident response, compliance status, and remediation progress.\nPerform other duties as assigned.\nQualifications\nBachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field; or an equivalent combination of education, certifications, training, and applicable work experience.\n4+ years of relevant work experience in IT security, cybersecurity operations, security operations, or a closely related technical security role.\nHands-on experience analyzing security events and alerts using SIEM platforms, endpoint detection and response tools, vulnerability scanners, firewalls, and ticketing systems.\nExperience supporting identity, access, and endpoint security technologies, including Microsoft 365, Entra ID, SSO, MFA, endpoint management, or zero-trust initiatives.\nExperience supporting vulnerability management, security incident response, or security control administration.\nFamiliarity with security frameworks such as NIST 800-171, CMMC, ISO 27001, or similar standards is preferred.\nProfessional certifications such as Security+, CySA+, GSEC, SSCP, or similar are preferred.\nPrior work experience in a highly regulated industry, government contractor environment, engineering organization, industrial/manufacturing company, and/or energy company is preferred.\nPrior work experience in a high-growth or rapidly scaling environment is preferred.\nKnowledge, Skills & Abilities:\nWorking knowledge of networking principles, endpoint security, identity and access management, cloud services, and common cybersecurity controls.\nWorking knowledge of security incident response principles and processes, including investigation, escalation, containment, remediation, recovery, and documentation.\nAbility to independently analyze routine and moderately complex security alerts and events, identify relevant patterns and indicators, and determine appropriate response or escalation.\nAbility to assess cybersecurity risks and prioritize remediation activities based on severity, likelihood, business impact, asset criticality, and established organizational criteria.\nAbility to analyze vulnerability findings, distinguish actionable risk from lower-priority findings, and coordinate remediation through closure.\nAbility to develop and interpret cybersecurity metrics, reports, and trend data related to incidents, vulnerabilities, compliance, and remediation progress.\nAbility to collaborate effectively with IT infrastructure teams, application owners, business stakeholders, third-party vendors, and managed service providers to investigate security issues and implement corrective actions.\nAbility to apply cybersecurity policies, standards, and control requirements in support of security operations, audits, compliance reviews, and control assessments.\nAbility to administer and monitor assigned security technologies and controls within established configurations, standards, and procedures.\nAbility to maintain accurate, complete, and audit-ready security documentation and control evidence.\nAbility to manage multiple security priorities and assigned remediation activities in a changing operational environment.\nAbility to analyze technical security problems and identify practical, risk-based solutions.\nAbility to communicate cybersecurity risks, findings, and remediation requirements effectively to technical and non-technical audiences.\nPhysical Demands\nRemaining in a stationary position, often standing, or sitting for prolonged periods\nCommunicating with others to exchange information\nEnvironmental Conditions\nGeneral office environment\nNoisy environments\nPrototyping/Test Facilities\nManufacturing/Industrial Environments\nSafety and PPE\nReading and interpreting hazardous warning signs \nReporting issues with equipment or unsafe conditions\nWearing proper PPE, to include face mask, face shields, gloves, safety shoes, or other PPE as required\nTravel\nSome travel may be required (5%) \nCertification\nProfessional cybersecurity certifications such as CompTIA Security+, CySA+, ISC2 SSCP, GIAC GSEC, Microsoft security certifications, or similar is preferred but not required.\nAdditional Requirements\nOccasionally requires working weekends\nOccasionally requires extended hours to support launch and critical project timelines\n\nThe salary range for this position is $108,735 to $127,923 for employees working onsite at our Alameda, CA headquarters. The range provided in this job posting represents the typical range or starting rate of candidates hired in California. Factors that maybe used to determine your actual salary may include your education, experience, knowledge, skills, ability and the market data for your work location, and a comparison to other employees already in the role. \nAbout our Benefits\nWe know that we have some of the most talented and dedicated employees, and we believe in rewarding them accordingly. If you work here, full-time employees (excludes interns) expect to have access to the benefits below:\nCompetitive compensation packages\nMedical, dental and vision benefits for employees and their dependents\nPaid Vacation\n401(k) and pre-tax health insurance, dependent care, and commuter benefits (FSA)\nKairos Power is committed to building a diverse workforce that reflects the communities where we do business. Kairos Power is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. We actively welcome people of different experiences, abilities, and perspectives.\nKairos Power participates in E-Verify.\nCandidates only, no recruiters or agencies please.\nNote: You are applying for a position that is located in a facility that handles information that is subject to export control restrictions by the Department of Energy under 10 CFR Part 810. To work in this facility, you need to be authorized by the Department of Energy to access Part 810-controlled information. Foreign nationals who are citizens of countries that are not on the Department of Energy’s general authorization list (link below) are not permitted to work in our facility unless the Department of Energy issues an export control license to the company to permit that individual to have access to Part 810-controlled information. The following questions are intended to determine the licensing requirements that may apply. https://www.law.cornell.edu/cfr/text/10/appendix-A_to_part_810","description_format":"text","description_chars":10046,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Nuclear Energy","Information Security","Nuclear Engineering"],"lifecycle":[{"event":"open","at":"2026-10-21T16:21:21Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1 · green card filings: 4","filings_12m":1,"filings_prev_12m":6,"green_card_filings_12m":4,"median_offered_wage_usd":140500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":200,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-10-22T06:10:10Z"},"pay":{"stated_usd_annual":127923,"is_top_pay":false},"html_url":"https://alion.io/job/kairos-power-it-security-analyst","json_url":"https://alion.io/job/kairos-power-it-security-analyst.json","meta":{"generated_at":"2026-10-23T03:30:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5803,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":97164},"rest":"https://alion.io/mcp/rest/get_company?id=97164"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkairos-power-it-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkairos-power-it-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkairos-power-it-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kairos-power-it-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkairos-power-it-security-analyst"}]}