Xcimer Energy

Cybersecurity & Compliance Administrator

Denver, CO · Staff+ · Part-time

Work authorization required$140k-$175kDetected 63 days ago

JavaScriptPythonAnsibleRESTCybersecuritySIEMMicrosoft DefenderSOARSOC OperationsIncident ResponseComplianceFirewallZero TrustResearchCommunicationCollaborationProblem Solving

About the role

Xcimer has assembled a team of leaders in tough tech, fusion science, and manufacturing with a track record of rapid execution.
This is a full-time, onsite role based at our headquarters in Denver, CO.

Responsibilities

Configure and manage Purview capabilities to support compliance objectives, including data classification and labeling, data loss prevention (DLP), retention and deletion policies, eDiscovery workflows, and compliance reporting.
Develop and maintain Purview‑derived compliance artifacts and evidence outputs to support assessments, audits, due diligence, and continuous monitoring aligned to CMMC 2.0 Level 2 and NIST SP 800‑171.
Monitor alerts, investigate suspicious activity, and drive remediation actions
Establish and maintain detection and response playbooks, including alert triage, escalation paths, documentation requirements, and post-incident follow-up.
Own and maintain the Security Incident Response Plan, including severity definitions, roles and responsibilities, evidence handling, escalation paths, and internal/external communication procedures.
Lead security incident response from identification through containment, eradication, recovery, and lessons learned.
Perform root-cause analysis and coordinate corrective actions with IT administrative staff and relevant stakeholders.
Proactively implement threat prevention measures: hardening, secure configuration baselines, conditional access/MFA enforcement support, and policy-driven risk reduction.
Monitor alerts, investigate suspicious activity, and drive remediation actions; reducing noise through continuous tuning and improvements.
Maintain an incident register covering actual, attempted, and suspected security incidents (including phishing attempts), investigations performed, and outcomes.

Requirements

Experienece: 7+ years of experience in security administration, security operations, compliance operations, or adjacent IT roles with direct security responsibility.
Proven background in security incident response, investigation, and documentation in regulated or high‑risk environments.
Working knowledge of system security best practices, access control, secure configuration, and audit logging.
Must be a U.S. citizen or national, U.S. permanent resident (current Green Card holder), or lawfully admitted into the U.S. as a refugee of granted asylum
Experience with centralized logging or SIEM platforms and detection playbook development.
Experience with cloud-based service integrations (webhooks/REST APIs) and security-relevant automation.
Experience with security-related scripting/automation practices and languages (Python, JavaScript, Ansible, SOAR‑style workflows etc.).
Bachelor's degree (or equivalent practical experience) in information technology, cybersecurity, information systems, or a related field.
Education: Bachelor's degree (or equivalent practical experience) in information technology, cybersecurity, information systems, or a related field.
Demonstrated hands‑on experience administering Microsoft 365 security and compliance services, including Microsoft Purview and Microsoft Defender in an enterprise environment.
Strong written and verbal communication skills
able to translate technical security risk into clear, actionable steps and documentation.
Comfortable operating as a self‑directed individual contributor in a fast‑paced and evolving environment.
Excellent technical and interpersonal communication skills
able to translate security risk into actionable steps.
Comfortable in a fast-paced, dynamic, and ambiguous environment.
Positive attitude, strong ownership mindset, strong professional judgement and ability to earn trust and maintain professional relationships.
Direct experience implementing or operating CMMC Level 2 and/or NIST SP 800‑171 controls, including evidence collection and assessment preparation.

Skills

Xcimer Energy leverages decades of research on Inertial Fusion Energy (IFE) combined with groundbreaking new laser architecture.
Contribute to automation where appropriate (e.g., scheduled scripts, workflows, or playbook-style response actions).
Work closely with IT and engineering teams to ensure smooth operations and secure-by-default practices.
Enforce approved security, compliance, and privacy policies and contribute to ongoing policy development and improvement.

Compensation

In addition, employees receive paid sick time, 13 company-paid holidays, and an annual paid company shutdown.

Benefits

Xcimer offers a comprehensive benefits package designed to support employee health, well-being, and long-term success.
Eligible employees also receive equity, allowing them to share in the company's long-term success.
Xcimer operates under a flexible Paid Time Off (ATO) approach.
Rather than a fixed number of vacation days, employees are trusted to take the time they need to rest and recharge while meeting the expectations of their role and team.
are available to regular employees, including part-time and fixed-term roles, as well as interns, with eligibility varying by benefit.

Equal opportunity

Xcimer Energy is proud to be an Equal Opportunity/Affirmative Action Employer and is committed to attracting, retaining, and developing a highly qualified, diverse, and dedicated work force.
Xcimer Energy hires and promotes people on the basis of their qualifications, performance, and abilities.
We support the establishment and maintenance of a workplace that fosters trust, equality, and teamwork, in which all employees recognize and appreciate the diversity of individual team members.
We provide all qualified applicants for employment and employees with equal opportunities for hire, promotion, and other terms and conditions of employment, regardless of their race, color, religion, gender, sexual orientation, gender identity, national origin/ethnicity, age, physical or mental disability, genetic factors, military/veteran status, or any other status or characteristic protected by federal, state, and/or local law.

Visa & Work Authorization

citizen or national, U

Apply directly at Xcimer Energy →Create a free account for alerts like this View Xcimer Energy immigration profile

This listing is sourced directly from Xcimer Energy's careers page and normalized into a canonical job model.