Security Engineer- On-site

Gulf Capital Bank is hiring a Security Engineer (On-site) in Houston, TX to help administer and continuously improve the Bank’s technical security controls. In this role, you’ll provide primary ownership of Palo Alto Networks firewall infrastructure and related network security technologies, while also supporting key Microsoft security tools and security monitoring, incident response, and audit activities. Health coverage, paid time off, and retirement benefits are included.

What you’ll do

• Administer, maintain, and support Palo Alto Networks firewalls across all Bank environments.
• Manage firewall policies, security rule requests, NAT configurations, and object administration.
• Configure, maintain, and troubleshoot site-to-site VPN and remote-access VPN connectivity.
• Monitor firewall health, performance, capacity, and availability.
• Perform log analysis and traffic review to identify malicious activity, policy violations, and operational concerns.
• Implement security policy changes in accordance with change management procedures.
• Maintain network segmentation controls that support secure banking operations.
• Configure and support Palo Alto security services including Threat Prevention and GlobalProtect.
• Complete firewall software upgrades, content updates, and security patching activities.
• Support network architecture reviews with security design recommendations.
• Maintain firewall documentation, network diagrams, and configuration standards.
• Participate in disaster recovery and business continuity testing related to network security infrastructure.
• Provide secondary support for Microsoft security solutions, including Microsoft Defender and Microsoft Sentinel.
• Monitor and investigate alerts generated through Microsoft Defender and Microsoft Sentinel.
• Support Microsoft Entra ID security controls and identity protection initiatives, including Conditional Access policy administration and review.
• Support Microsoft Secure Score recommendations and assist with security enhancements across Microsoft cloud services.
• Assist with Microsoft 365 email security and anti-phishing technologies.
• Participate in vulnerability management and remediation activities, and support security assessments and penetration testing.
• Support incident response activities including analysis, containment, eradication, and recovery; collect and preserve evidence and document outcomes, findings, and corrective actions.
• Assist with threat hunting and security monitoring; escalate significant security events according to established procedures.
• Assist with phishing investigations and security awareness support.
• Support regulatory examinations and internal/external audits, including remediation of audit findings and security recommendations.
• Follow Bank security policies, standards, and procedures; support compliance with applicable regulatory and security requirements, and assist with vendor security reviews and third-party risk assessments.

What you bring

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field, or equivalent combination of education and experience.
• 3 to 5 years of information technology or cybersecurity experience.
• 2+ years of hands-on firewall administration experience.
• Experience troubleshooting enterprise networking and security technologies.
• Working knowledge of Windows Server and Active Directory environments.
• Strong understanding of TCP/IP networking concepts.
• Knowledge of Palo Alto Networks firewall administration, VPN technologies and troubleshooting, and network routing and switching fundamentals.
• Security logging and event analysis, network segmentation and security policy management, and vulnerability management concepts.
• Windows administration fundamentals, Microsoft 365 administration fundamentals, and security incident investigation and response.

Preferred qualifications

• Palo Alto PCNSA and/or Palo Alto PCNSE certification.
• CompTIA Security+ certification.
• Experience with Microsoft Defender, Microsoft Sentinel, Microsoft Entra ID, and Microsoft Azure.
• Experience within a financial services or regulated environment.
• PowerShell scripting experience.

Tools you’ll work with

• Palo Alto Networks firewalls, Palo Alto Threat Prevention, GlobalProtect
• Site-to-site VPN, remote-access VPN
• Microsoft Defender, Microsoft Sentinel, Microsoft Entra ID
• Conditional Access, Microsoft Secure Score, Microsoft 365 (including email security and anti-phishing technologies)
• Windows Server, Active Directory, TCP/IP, PowerShell

Benefits

• Health insurance
• Dental insurance
• Vision insurance
• Paid time off
• 401(k)
• 401(k) matching

Physical requirements

• Ability to sit for extended periods while working on computer systems.
• Ability to occasionally lift and move equipment weighing up to 25 pounds.
• Ability to travel occasionally between Bank locations and vendor sites as needed.