Lead IT Network Security Engineer

CenterPoint Energy is hiring a Lead IT Network Security Engineer in Houston, Texas to strengthen the organization’s network infrastructure and secure internet-facing web applications. In this onsite role, you will provide technical leadership across CNP environments, designing and operating security controls that help defend against cyber threats, application attacks, and automated bot abuse.

You’ll work at the intersection of network security and application security, collaborating with Security Architecture, Network Engineering, DevOps, and engineering partners to implement secure solutions, review infrastructure and application changes, and drive continuous improvement through incident support, vulnerability remediation support, and security operations metrics.

Key Responsibilities

• Provide technical leadership and subject-matter expertise for network security and web application security across CNP environments.
• Design, implement, maintain, and troubleshoot security controls that protect network infrastructure, applications, and internet-facing services.
• Develop and maintain policies covering firewall, WAF, threat prevention, URL filtering, remote access, and application security.
• Protect web applications from application-layer threats, automated attacks, malicious bots, and abuse.
• Manage and support enterprise security technologies including Next Gen firewalls, Prisma Client VPNs, and Web Application Firewall (WAF) where applicable.
• Analyze security events, alerts, and traffic patterns to identify threats, vulnerabilities, policy issues, and opportunities to strengthen controls.
• Lead troubleshooting and resolution of complex network and application security incidents and service-impacting issues.
• Partner with Security Architecture, Network Engineering, DevOps, application teams, and infrastructure teams to design and implement secure solutions.
• Review proposed infrastructure and application changes to align with cybersecurity policies, architecture, and standards.
• Maintain security configurations, standards, procedures, diagrams, and operational documentation.
• Provide technical guidance and mentorship to engineers, serving as an escalation point for complex security issues.
• Support change management, incident response, vulnerability remediation, lifecycle management, and continuous security improvement initiatives.
• Monitor platform health and maintain KPI reporting on coverage, rule effectiveness, and incident trends.
• Implement automation scripting to improve firewall and web application firewall operations and services.
• Maintain platform documentation, change records, and configuration baselines.
• Serve as a subject-matter expert for firewall best practices, policies, and regulatory requirements.
• Support internal and external audits and interface with technical vendors regarding security issues and solution recommendations.
• Develop firewall security standards and firewall security architecture designs.
• Author technical documentation and perform infrastructure and web application vulnerability assessments.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Minimum 5 years of experience in Cybersecurity or IT.
• Hands-on experience with Next Gen Firewalls and Web Application Firewalls.
• Hands-on experience with network, OS, and application security.
• Experience tuning WAF rulesets, managing false positives, and maintaining policy hygiene.
• Experience with Azure and GCP cloud apps and services.
• Experience with Zero Trust, SASE, network segmentation, DLP, and cloud security architectures.
• Experience supporting highly available, business-critical, or customer-facing applications and network security services.
• Experience collaborating cross-functionally with DevOps, IT, and Network Security teams.
• Familiarity with change management processes and maintaining configuration documentation.
• Experience implementing Zero Trust or similar modern security models.
• Strong analytical skills, attention to detail, and knowledge of networking protocols and cybersecurity frameworks.
• Understanding of IT and its impact on securing network environments.
• CISSP or other relevant security certifications (Next Gen Firewall, Web Application Firewall, Cloud Security) highly preferred.
• Knowledge of SOX, HIPAA, and NERC regulations preferred.

Technologies

• Next Gen firewalls, Prisma Client VPNs, Web Application Firewall (WAF), WAF rulesets
• Azure, GCP
• Zero Trust, SASE, network segmentation, DLP
• Firewall, URL filtering
• Automation scripting

Benefits

• Competitive pay
• Paid training
• Benefits eligibility begins on your first day
• Transit subsidies
• Flexible work schedule, paid holidays and paid time off
• Access to discounts at fitness clubs and an on-site wellness center at headquarters in Houston
• Professional growth and development programs including tuition reimbursement
• 401(k) Savings Plan with a company match dollar-for-dollar up to 6% and a company contribution of 3% regardless of your contribution

Job Details

• Job type: Full Time
• Location: Houston, TX, US (onsite)
• Posting start date: 11/02/2026
• Posting end date: 11/20/2026
• Nearest major market: Houston