Security Engineer

About the Company

General Matter enriches uranium. We are designing, building, and operating the world’s lowest-cost enrichment services, here in the US. Our mission is to make nuclear not only the cleanest and safest source of baseload power, but also the most affordable.

Responsibilities

• Design, implement, and maintain security controls across product, infrastructure, corporate, and regulated environments.
• Secure cloud, on-prem, air-gapped, and classified systems in alignment with NRC, federal, and internal security requirements.
• Support security operations, including monitoring, detection engineering, incident response, vulnerability management, and remediation tracking.
• Implement and improve identity and access management controls across workforce systems, production environments, and privileged access workflows.
• Partner with engineering teams to embed application security and secure SDLC practices across hardware, firmware, and software development.
• Contribute to GRC efforts, including policy implementation, risk assessments, audit readiness, NRC licensing support, and classified facility accreditation preparation.

Requirements

• 5+ years of hands-on cybersecurity experience
• Practical experience implementing security controls in production or high-stakes environments
• Experience working in regulated environments (federal, defense, nuclear, classified, ITAR)
• Strong technical knowledge of cloud security, network security, endpoint security, IAM, and security monitoring
• Experience supporting incident response, vulnerability management, or security event investigation
• Ability to work cross-functionally with engineering, IT, compliance, and operations teams
• Ability to work extended hours and weekends as necessary

Preferred Qualifications

• Experience supporting NRC licensing, classified facility buildouts, or federal frameworks (NIST 800-53, NIST 800-171, RMF, or STIGs)
• Familiarity with hardware security, embedded systems, industrial control systems, or operational technology environments
• Experience designing or operating secure architectures for hybrid cloud, air-gapped, or highly restricted systems
• Fluency with modern DevSecOps tooling, detection engineering, infrastructure-as-code security, and automation
• Experience contributing to security policies, control documentation, audits, or compliance evidence collection