Gloria J. Martinez

Nuclear security leader with extensive experience managing physical security, cyber security, safeguards, access-related controls, regulatory inspections, audits, assessments, security plans, contractor oversight, training support, budget management, and DOE/NRC compliance in nuclear and national security environments.

Physical Security

Program leadership, protection strategy development, secure facility inspections, security plan development, and protective force experience. Nuclear cyber security and IT/OT infrastructure security expertise across critical digital assets, networks, DCS/plant systems, firewalls, data diodes, SIEM, IDS, and vendor technologies. Regulatory interface experience with NRC, DOE, DHS CISA, NNSA, IAEA, and numerous site inspection teams.

Leadership experience supervising engineers, analysts, protective force personnel, multidisciplinary assessment teams, and project contributors. Previous DOE Q clearance, DOE Human Reliability Program, NRC Critical Group, and current Safeguards access. Held numerous positions in physical and cyber security positions – all in leadership capacity roles.

Program Manager Nuclear Security - NuScale Power - Remote (Albuquerque, NM)

(2025-08)

• Manage integrated nuclear security program elements for physical security, cyber security, security of applicable OT systems, access authorization interfaces, fitness-for-duty considerations, training expectations, audit readiness, and regulatory commitments.
• Provide leadership, coaching, mentoring, and accountability across multidisciplinary security stakeholders while supporting site and corporate strategies, cultural values, and measurable security program results.
• Serve as the primary program lead for NuScale Power's nuclear security strategy, integrating physical security and cyber security requirements for small modular reactor technology and future plant deployments.
• Implement and maintain formality of operations in nuclear security and complex technical SMR operations and engineering environments by developing procedural controls that align work scope, performance expectations, consequence management, and program deliverables.
• Manage day-to-day program priorities, schedules, budgets, resources, contractor support, work planning, work oversight, and project status reporting with Project Managers using Primavera P6.
• Work with Engineering Prime Contractor (EPC) on Construction Security Plan, Access Authorization, and Fitness for Duty requirements.
• Lead the development, integration, and governance of nuclear security programs supporting safe, secure, and compliant design, licensing, deployment, and operational readiness under 10 CFR 52, 10 CFR 73.54, 10 CFR 73.55, NEI 08-09, and NEI 13-10.
• Direct integrated physical security and cyber security program activities for reactor design, digital I&C systems, distributed control systems, networks, embedded components, plant services, procurement, supply chain, customer deployment, and NRC licensing deliverables.
• Lead a multidisciplinary cyber security assessment team across nuclear programs (i.e., operations, engineering, IT, security, and emergency preparedness) to incorporate security requirements into plant architecture, develop and maintain program procedures, and align technical assessments with program objectives and regulatory commitments.
• Develop security plans, program procedures, safeguards physical protection and protective force strategies using modeling and simulation (MODSIM), staffing approaches, and training considerations.
• Partner with licensing to support NRC approval of COLA Chapter 13.
• Represent NuScale in regulatory, industry, customer, and stakeholder meetings and workshops; translate regulatory, technical, and operational requirements into actionable programs, procedures, designs, and project deliverables.

Lead Cyber Security Engineer Consultant - South Texas Project Electric Generating Station (in-house) and BHI Energy (contractor) - Wadsworth, TX

(2023-09 - 2024-07)

• Oversaw security program work products, procedures, inspection readiness, corrective actions, contractor/vendor activities, and regulatory reporting expectations supporting NRC and site compliance.
• Managed IT/OT security infrastructure activities supporting nuclear plant operations, including system architecture, network security technologies, security monitoring, incident response, and technical controls.
• Supervised Cyber Security Engineers / Analysts and IT Analysts oversaw the selection of new employees and mentored employees.
• Reviewed and approved work including engineering and design changes to the CSP, procedures, and security control assessments.
• Led, managed, and conducted critical infrastructure projects from initiation to completion, ensured adherence to infrastructure protection standards and provided design recommendations for SOC, security systems, ECs, DCPs, and vendor engagements (e.g., Wiznucleus & Infrashield).
• Supervised project implementation, testing, commissioning, and closeout processes while developing and updating project plans to include design, scope, schedule, budget, and resource allocation.
• Had ERO activities during site refueling outages and on-call emergency response duties.
• Lead person for inspections with NRC and Infrashield, and performed in-house and external customer audits.
• Provided technical expertise for engineering designs, including the building and configuration of STPs IT and OT systems and networks.
• Performed network architecture and cyber security analyses, product configuration, and troubleshooting of complex problems.
• Maintained and configured operating systems, network security equipment (e.g., firewalls, data diodes, security information and event management, and intrusion detection systems) and OT applications such as Ovation.
• Ensured system integrity by preventing malware disruptions and analyzing network traffic to identify anomalies.
• Monitored, investigated, & responded to security breaches and incidents, ensuring timely reporting to management and authorities (e.g., NRC).
• Followed vulnerability and incident management procedures, taking appropriate actions to mitigate security vulnerabilities.
• Adhered to regulatory standards including 10CFR73.54, 10CFR73.55, Cyber Security Plan, NEI 08-09, NEI 13-10, NIST 800 SP, and STP procedures.

Nuclear Cyber Security Specialist - Battelle Energy Alliance for Idaho National Laboratory - Idaho Falls, ID

(2019-06 - 2021-10)

• Lead assessor for Department of Homeland & Security DHS CISA conducting threat, risk, and vulnerability assessments for critical infrastructure and Cybercore Integration Center National & Homeland Security Directorate, focusing on cyber security for nuclear facilities.
• Led, coordinated, and integrated system design, including implementation of system architecture and design concepts, interfacing with plant systems, and preparing hardware, software, and network architectures to support assessments and procedures.
• Provided technical direction for the development, engineering, integration, and assessment of specific components of complex hardware/software systems, including requirements elicitation, analysis, and functional allocation.
• Conducted vulnerability assessments for government and public facilities, performed security scans (packet captures) to identify system vulnerabilities, and recommended technical solutions to mitigate security risks. Delivered detailed reports to customers and stakeholders, ensuring awareness of identified vulnerabilities.
• Authored implementation guidance documents for a Navy program, determined security requirements and gaps, and provided recommendations and mitigations for naval cybersecurity assessments. Collaborated with the Department of Energy's National Nuclear Security Administration, Defense Nuclear Nonproliferation organization, International Atomic Energy Agency, and private sector entities.
• Adhered to Cyber Security Plan guidelines, including NEI 08-09, NEI 13-10, NIST SP 800 series, and IAEA procedures.

Cyber Security Engineer/CSAT Lead - Universal Resources, Inc. for Southern Nuclear Company - Birmingham, AL

(2017-08 - 2018-10)

• Lead IT CSAT signatory and reviewer of Southern Nuclear Company's cyber security assessments for the nuclear sites.
• Involved in the NRC Milestone 8 Inspection as counterpart/liaison to NRC on behalf of the Vogtle Cyber Security Team
• Conducted ongoing cyber security threat and vulnerability assessments on critical digital assets (CDAs) per 10CFR73 Physical Protection of Plants and Materials, Cyber Security Plan (CSP), and Physical Security Plan (PSP), NEI 08-09, and NEI 13-10.
• Provided technical expertise for engineering designs (e.g., engineering changes and design change plans, etc.), including the building and configuration of STP's IT and OT systems and networks.
• Performed network architecture and cyber security analyses, product configuration, and troubleshooting of complex problems and maintained an in-depth knowledge of nuclear power plant IT and OT systems.

Cyber Security Engineer - Oxford Global Resources, Inc. for South Texas Electric Generating Station - Wadsworth, TX

(2016-01 - 2017-08)

• Participated in the NRC milestone 8 inspection; conducted ongoing cyber security assessments on critical digital assets (CDAs) per 10CFR73 Physical Protection of Plants and Materials, Cyber Security Plan (CSP), and Physical Security Plan (PSP), NEI 08-09 and 13-10.
• Worked with Engineering, Operations, and IT to complete CDA assessments for compliance with cyber security standards and site procedures.
• Performed cyber security analyses, product configuration, and troubleshooting of complex problems.
• Worked with Reactor / Plant Operations and Engineers to build an in-depth knowledge of nuclear power