Houston, TX

Cybersecurity Jobs in Houston, TX

36 jobs found

Include remote jobs

Today

Account Manager - Cybersecurity

Optiv Houston, TX

Houston, TX

Today

Full time Manager Account Management Account Management (sales)

Apply Now

Job Description

Optiv is seeking a Field-based Account Manager to manage strategic cybersecurity accounts across an assigned territory in Texas. This client-facing role supports the full sales cycle, builds multi-year account plans, and partners with internal teams to execute against client goals and satisfaction priorities.

Role Overview

This position is responsible for selling Optiv security services and security technology solutions to a select set of strategic accounts within the assigned geography. The Account Manager owns and coordinates end-to-end sales activities, leads a cross-functional team for multi-year strategic account management planning, and conducts quarterly goal reviews with an emphasis on client satisfaction.

Key Responsibilities

Sell Optiv security services and security technology solutions to strategic accounts in the assigned geography.
Own and coordinate all aspects of the sales cycle for assigned accounts.
Lead cross-functional efforts to build and execute a multi-year strategic account management plan for top accounts.
Develop trusted, effective relationships with client executives across assigned accounts.
Create multi-year strategic account management plans for top accounts based on identified client business, technology, and cybersecurity goals, aligned with Optiv’s understanding of security trends, threats, and perspectives for each account.
Build a sales pipeline, ideally 4 times assigned targets, and achieve or exceed the assigned gross margin target.
Manage current and multi-quarter forecasts with high accuracy, currency, and integrity.
Execute sales activities in alignment with Force Management principles, including MEDDICC and Command of the Message, among others.
Communicate Optiv’s value proposition related to security services and technology expertise and capabilities.
Build collaborative relationships with technology partners and their sales personnel to gain and share leads, supporting qualified pipeline creation and mutually beneficial opportunities.
Initiate and/or monitor and mediate communications among clients, technology partners, and the extended Optiv team (technical, sales, client operations, and others) within each assigned account.
Maintain effective internal communication regarding opportunities, requirements, and client satisfaction.
Engage clients with a heightened focus on continuous client satisfaction improvement.
Meet with top clients early in the year to understand and document business, technology, and security goals, along with client expectations of Optiv.
Review goals, expectations, and progress with top clients quarterly, engaging Optiv leadership and resources as needed to stay on track toward client-defined goals.

Required Qualifications

3 to 5 years of product or services-based sales experience, typically in a technology company, ideally cybersecurity.
Proven ability to build and execute territory and account prospecting and expansion plans, with a track record of exceeding assigned quotas.
Experience effectively engaging cross-functional resources, including sales, pre-sales technical support, and other support personnel.
Demonstrated ability to build productive business relationships with key executives and sponsors in assigned accounts.
Strong presentation skills and effective verbal and written communication.
Negotiation experience.
History of achievement exceeding plan and expectations.

Location and Work Setting

Houston, TX (onsite). This is a field-based role supporting strategic account coverage in the assigned geography.

Benefits

A company committed to inclusive value through Employee Resource Groups
Work/life balance
Professional training resources
Volunteer Opportunities: “Optiv Chips In” encourages employees to volunteer and engage with teams and communities
Ability and technology necessary to work productively remotely/from home (where applicable)

Additional Information

This role aligns to the qualification profile of candidates with product or services-based sales experience, territory and account expansion capability, cross-functional collaboration experience, executive relationship building, communication and negotiation skills, and a demonstrated record of exceeding expectations.

View full job page →

1d ago

Enterprise IT Security Analyst 1

University of Houston Houston, TX

Houston, TX

1d ago

Full time Incident Response Information Security Information Technology (IT)

Apply Now

Job Description

The University of Houston’s UIT Security team supports the protection of university information resources through hands-on risk analysis, incident support, and security metrics reporting. This onsite role operates under direct supervision and focuses on practical day-to-day security work, including support for incident investigations and security risk assessments that help align with university policies and procedures.

What you’ll do

Provide day-to-day customer service for information security issues reported to the department.
Assist with investigations of campus information security incidents to support resolution.
Support security risk assessments to help ensure compliance with university policies and procedures.
Collect data for IT security metrics and assist with state-required information security reporting.
Maintain security department records, including policy and procedure documents and software licensing records.
Perform other job-related duties as assigned.

Security-sensitive expectations

This position is designated security sensitive and includes research and work involving critical infrastructure. Under the requirements of the State of Texas Executive Order No. GA-48, the role involves access to systems where maintaining the security or integrity of University infrastructure is required.

Personnel in this role will be routinely reviewed to determine whether criminal history or continuous connections for the government or political apparatus of a foreign adversary could prevent the employee from maintaining the security or integrity of the infrastructure. All positions at the University of Houston-System require a criminal history check.

Requirements

Pursuant to State of Texas Executive Order No. GA-48, ability to maintain the security or integrity of University infrastructure, including research, work, or access related to critical infrastructure.
Ability to meet personnel review requirements tied to criminal history and continuous connections for a foreign adversary.
Thorough understanding of theoretical and practical aspects of an analytical, technical, or professional discipline, or basic knowledge of more than one professional discipline.
Knowledge typically obtained through a formal, directly job-related 4 year degree or an equivalent in-depth specialized training program related to the work performed.
Education may be accepted in lieu of experience.
Experience may be accepted in lieu of education.
Minimum 6 months of directly job-related experience.

Location and compensation

Location: Houston, TX (onsite).
Salary: Commensurate with Experience/Education.

View full job page →

2d ago

Networking and Cybersecurity Manager

Sheldon Independent School District Houston, TX

Houston, TX

2d ago

$71k+/yr Full time Manager Cybersecurity Leadership Cybersecurity Operations

Apply Now

Job Description

Join Sheldon Independent School District as a Networking and Cybersecurity Manager in Houston, TX (onsite), where you will lead the district’s Network, Systems, and Cybersecurity functions. This role supports a secure and dependable technology environment for district priorities, with emphasis on documentation, reliability, and coordinated cybersecurity operations. The position is part of the Technology team and is based at the Network Operations Center.

What you’ll get

Minimum salary: USD 70,553 per year for fully certified teachers
Salary: commensurate with experience
Work calendar: 226 day calendar
Onsite role: requires in-person attendance and is not eligible for remote work

Key responsibilities

You will provide day-to-day leadership for district personnel supporting enterprise infrastructure and related platforms. Responsibilities include managing network and systems operations, ensuring the environment is secure, reliable, available, well-documented, and aligned with departmental standards.

Manage and provide day-to-day leadership for Network, Systems, and Cybersecurity functions and assigned personnel
Supervise network infrastructure work covering Aruba CX switching, wireless access points, Aruba Central, ClearPass appliances, Palo Alto firewalls, NETSCOUT platforms, Internet connectivity, and related services
Supervise systems infrastructure including backup and recovery, camera/video servers, physical and virtual servers, virtualization, storage, email archiving, email security and spam filtering, Skyward SIS, Google Workspace administration, Active Directory, identity services, certificates, and related enterprise systems
Oversee firewall services, secure remote access, network segmentation, access controls, privileged access, certificate management, and other infrastructure security controls
Implement and ensure staff adherence to technical standards, operating procedures, documentation requirements, and escalation paths established by the Director of Technology
Monitor infrastructure availability, performance, capacity, patching, configuration, lifecycle, and security needs; coordinate upgrades, replacements, troubleshooting, and remediation
Coordinate cybersecurity operations such as vulnerability management, endpoint protection, security monitoring, threat detection, incident investigation, containment, remediation, documentation, and escalation
Attend the Texas Education Agency (TEA) cybersecurity meeting monthly and communicate requirements, alerts, recommendations, and action items to Technology leadership and relevant staff
Oversee backup and recovery operations, including documentation and periodic testing of disaster recovery and business continuity procedures
Coordinate with hardware, software, telecommunications, cloud, infrastructure, and cybersecurity vendors; manage support escalations and assist with technical projects, proposals, and purchasing recommendations
Ensure technical documentation stays current, including diagrams, inventories, configurations, procedures, incident records, certificates, and related documentation
Assist Technology leadership with technology and cybersecurity policies, audits, assessments, compliance activities, required reporting, and long-range infrastructure planning
Provide technical guidance, coaching, training, and cross-training; participate in interviews, performance feedback, scheduling, and after-hours coverage
Serve as the Director’s designee in the Director’s absence (Assistant Director of Technology)
Perform other duties as assigned by the Director of Technology or the Assistant Director of Technology when designated

Required qualifications

Associate degree or above preferred from an accredited college or university in Computer Science, Information Technology, Computer Engineering, Computer Engineering Technology, Management Information Systems, Cybersecurity, or a closely related technology field
Must hold or obtain at least one industry-recognized certification in a preferred certification area within the first year of hire
Certifications in two or all three areas strongly preferred
5 (five) or more years of progressively responsible IT experience involving enterprise networking, systems administration, cybersecurity, data center, cloud, or related infrastructure
Strong knowledge of enterprise switching, routing, wireless networking, network access control, firewalls, Internet connectivity, network monitoring, and related infrastructure
Knowledge of enterprise servers, virtualization, storage, backup and recovery, identity and access management, cloud services, email security and archiving, certificates, and systems administration
Knowledge of cybersecurity operations including vulnerability management, endpoint security, threat detection, security monitoring, privileged access, incident response, and risk mitigation
Ability to supervise technical personnel, coordinate vendors and projects, maintain technical documentation, and communicate effectively with technical and nontechnical personnel
Ability to maintain confidentiality and respond to critical infrastructure or cybersecurity incidents outside normal work hours when required

Technologies you’ll work with

Aruba CX switches
HPE Aruba Networking Central (Aruba Central)
ClearPass appliances
Palo Alto firewalls
NETSCOUT platforms
Skyward SIS
Google Workspace administration
Active Directory
Microsoft email security and archiving (email archiving, email security and spam filtering)
Google Workspace
TEA cybersecurity meeting

Supervisory responsibilities

Supervise and evaluate assigned Network and Systems personnel and coordinate district cybersecurity operations
Provide work assignments, technical direction, coaching, performance feedback, staff development, and participate in hiring and personnel recommendations according to district procedures

Working conditions

Work performed in office, data center, network room, and school-campus environments with districtwide travel
May require irregular hours, planned after-hours maintenance, and response to critical infrastructure or cybersecurity incidents
Frequent computer use; occasional lifting or movement of technology equipment may be required

Application details

Date posted: 10/14/2026
Applications accepted through October 19, 2026; after this date, applications may continue to be accepted if a suitable candidate is not identified
If no viable candidate is selected from the initial pool, applications submitted after October 19th will be reviewed in five-day intervals until a candidate is recommended for hire

View full job page →

3d ago

Network Security Engineer II

Memorial Hermann Health System Houston, TX

Houston, TX

3d ago

Full time Cybersecurity Tools Engineer Identity and Access Management

Apply Now

Job Description

Network Security Engineer II provides deployment, configuration, administration, and operational support for network security resources in an onsite Houston role.

Responsibilities

Support the research, installation, configuration, implementation, troubleshooting, and maintenance of security systems and services
Help implement controls and procedures that protect information systems from unauthorized or accidental modification, disclosure, or destruction (under Team Leads or Management guidance)
Deliver unassisted support to application owners, project managers, vendors, and end-users
Work across teams to complete project tasks across multiple project levels
Own project timelines by meeting and setting schedule targets
Recommend technical standards
Participate in designing and planning advanced security systems or services
Provide guidance and mentoring to Security Analyst(s)
Research and recommend acquisition of new security tools and technology
Cover a rotating 7x24 on-call support shift, rotated weekly among the Information Security Cyber Operations team
Ensure safe care to patients, staff, and visitors while adhering to Memorial Hermann policies, procedures, and standards, including time management, supply management, productivity, and quality of service within budgetary specifications
Support professional growth by meeting mandatory/continuing education requirements and maintaining skills competency; act as preceptor, mentor, and resource to less experienced staff
Model Memorial Hermann service standards by providing safe, caring, personalized, and efficient experiences to patients and colleagues
Perform other duties as assigned

Requirements

Bachelor’s degree in Computer Science or a related field (preferred)
Entry-level networking and security certification such as PCNSA, CCENT, Network, Security, or equivalent (preferred)
3 to 6 years of experience configuring network devices such as switch, router, access point, or firewall
3 to 6 years of experience creating detailed topology diagrams and technical documentation
3 to 6 years of experience troubleshooting connectivity issues
Ability to perform networking tasks independently
Strong understanding of the OSI model
Strong knowledge of well-known ports
Familiarity with Active Directory Users and Groups
Experience using packet analysis tools such as Wireshark
Familiarity with common malware, cyber-attacks, and types of attackers
Good communication and interpersonal skills for successful teamwork

Technologies

Wireshark
Active Directory Users and Groups

Job Summary

Experienced network security engineer responsible for the deployment, configuration, and administration of network security resources
Documents and illustrates network topology diagrams
Supports physical installation, configuration, testing, troubleshooting, and maintenance of related equipment and services
Collaborates with network engineering, desktop services, client administration, application owners, project managers, vendors, and end-users to provide support and administrative services
Reports to the Manager, Network Security

Location: Houston, TX (onsite)

Experience: 3 years minimum

View full job page →

5d ago

Cybersecurity Specialist

Kuraray America Houston, TX

Houston, TX

5d ago

Full time Cybersecurity Tools Data Security Facilities Management

Apply Now

Job Description

The Cybersecurity Specialist role supports Kuraray America’s chemical manufacturing operations by protecting the organization’s digital infrastructure. The position focuses on identifying, monitoring, and mitigating cybersecurity threats across both IT and OT environments, including responses to penetration attempts.

Work Location and Schedule

Houston, TX (hybrid). In-office time is required on Tuesday and Wednesday.

Key Responsibilities

Monitor and respond to cybersecurity incidents across IT and OT environments.
Identify and respond to penetration attempts, malware, and other security threats.
Maintain and manage security tools, including firewalls, patching systems, antivirus, intrusion detection/prevention systems, and encryption solutions.
Conduct vulnerability scans, penetration tests, and fault diagnostics.
Address security risks and system weaknesses in a timely manner.
Recommend and implement technical updates to strengthen the security posture.
Help develop and enforce security policies, procedures, and compliance standards, including NIST and ISO 27001.
Ensure daily work aligns with company policies and industry regulations.
Assist with audits and support documentation for internal and external compliance needs.
Implement and support disaster recovery plans and backup protocols, including maintaining accurate documentation for recovery and business continuity efforts.
Perform system health checks, application testing, and troubleshoot technical issues.
Collaborate with cross-functional teams to resolve problems and improve performance.
Stay current on cybersecurity trends, tools, and threat landscapes, and evaluate how new developments may affect the digital environment.
Collect and analyze logs and security data to identify unusual activity or patterns.
Support reporting processes and provide actionable insights from security data.

Required Qualifications

Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related field.
Minimum of three years of cybersecurity experience, preferably in manufacturing or chemical industries.
Experience with SIEM tools, firewalls, endpoint protection, vulnerability scanning, and incident response.
Knowledge of cybersecurity frameworks including NIST and ISO 27001, plus regulatory compliance.
Relevant certifications such as Security+, CEH, or CISSP (or willingness to obtain) are preferred.
Familiarity with ICS, SCADA, or OT cybersecurity is a plus.
Strong analytical, problem-solving, communication, and teamwork skills.
Outstanding verbal and written communication, presentation, interpersonal, creative thinking, consulting, and analytical skills.
Ability to prioritize work, manage multiple projects, and meet deadlines.
Excellent problem-solving and decision-making skills.
Ability to multi-task.
Must have a valid driver’s license.

Technologies and Frameworks

SIEM tools
Firewalls
Antivirus
Intrusion detection/prevention systems
Encryption solutions
Vulnerability scanning
NIST
ISO 27001
ICS
SCADA
OT cybersecurity

Benefits

Competitive compensation package including base pay and an annual incentive
Robust healthcare package including wellness reimbursements
Three weeks of paid time off
Ten company holidays
Paid parental leave
Education reimbursement
Matching 401k plan

Compensation Incentive Program

The annual incentive program is designed to reward individual performance and align overall rewards with corporate and team performance.

View full job page →

7d ago

Sr. Cybersecurity Analyst - Detection & Response

Motiva Enterprises, LLC Houston, TX

Houston, TX

7d ago

Full time Cyber Security Cybersecurity Tools Incident Response

Apply Now

Job Description

Motiva Enterprises, LLC is seeking a Sr. Cybersecurity Analyst to join its Cybersecurity Operations team, reporting to the Cybersecurity Operations Manager. This in-office role supports detection and response activities across the organization by monitoring security signals, investigating incidents, and helping advance Motiva’s cybersecurity program through technology optimization and measurable process maturity.

Working from Motiva’s corporate headquarters in Downtown Houston, TX, the analyst will help correlate log data, identify suspicious or anomalous activity, and support vulnerability detection and remediation tracking. The position also includes on-call coverage as needed.

Key Responsibilities

Assist in developing strategy, goals, and objectives for the cyber security program.
Drive the program toward maturity through repeatable processes, metrics, and continuous improvement.
Respond to and investigate cybersecurity events and incidents.
Analyze log information to correlate security events and improve investigation outcomes.
Detect, analyze, and track remediation of security vulnerabilities.
Research emerging threats and help implement or lead preventive controls.
Support, maintain, and enhance protection and detection security technologies.
Assist in developing security metrics, providing technical analysis to inform performance and trends.
Provide on-call support as needed.
Resolve problems of a clearly defined nature using the best identified method of resolution.
Provide basic advice and guidance to lower-level business support workers within the scope of assigned projects.
Perform other duties as assigned.
Read and abide by the company’s code of conduct, ethics statements, employee handbook(s), policies and procedures, and other corporate mandates, including participation in mandatory training programs.
Report any real or suspected violation of the corporate compliance program, company policies and procedures, harassment, or other prohibited activities in accordance with reporting policies.
Obtain clarification of policy whenever necessary, using resources available through Compliance, Human Resources, or Legal.
Support and abide by the company values.

Minimum Requirements

Associate’s or bachelor’s degree, or an equivalent combination of education and relevant work experience (with year-for-year substitution).
At least 5 years of experience in cybersecurity operations, threat detection, incident response, security monitoring, or a related cybersecurity discipline.
Experience monitoring enterprise IT environments and investigating security events, alerts, and incidents.
Knowledge of security operations, incident response processes, threat intelligence, and security monitoring technologies.
Familiarity with cybersecurity frameworks and standards, including NIST Cybersecurity Framework and CIS Controls.
Understanding of applicable cybersecurity, privacy, and regulatory requirements, including GDPR, HIPAA, and other relevant industry standards.
Strong analytical and critical thinking skills to identify, investigate, and respond to suspicious or anomalous activity.
Ability to interpret complex datasets and correlate information from multiple sources for threat detection and incident investigations.
Strong written and verbal communication skills for technical and non-technical audiences.
Experience with data analysis, reporting, dashboard development, and security metrics.
Strong technical documentation, reporting, and incident tracking capabilities.
Ability to independently manage assigned security initiatives, priorities, and projects in a fast-paced environment.
Proficiency with Microsoft Office applications including Excel, Word, and PowerPoint.
Strong collaboration skills with cross-functional work across IT, risk, and business teams.

Technologies and Frameworks

NIST Cybersecurity Framework
CIS Controls
GDPR, HIPAA
Microsoft Office (Excel, Word, PowerPoint)
CompTIA Security+
CompTIA PenTest+
GIAC Security Essentials (GSEC)
Systems Security Certified Practitioner (SSCP)
Certified in Cyber (ISC2 CC)
CySA+
GCIA
GCIH
MITRE ATT&CK Framework
SOC operations
SIEM platforms
Security process automation
Python
PowerShell
Cyber kill chain

Preferred Qualifications

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related field.
Relevant cybersecurity certifications such as CompTIA Security+, CompTIA PenTest+, GIAC Security Essentials (GSEC), SSCP, ISC2 CC, CySA+, GCIA, GCIH, or similar industry-recognized credentials.
Experience reviewing, tuning, developing, and optimizing security detections to reduce false positives and improve threat visibility.
Working knowledge of SOC operations, SIEM platforms, and security process automation.
Ability to script using Python and/or PowerShell.
Experience leveraging APIs and scripting for system integration and automation.
Familiarity with incident response methodologies, cyber kill chain concepts, and the MITRE ATT&CK Framework.

Work Authorization and Equal Opportunity

Based in Houston, TX and classified as an in-office role at Motiva’s corporate headquarters in Downtown Houston.
For regular U.S. positions, applicants must be authorized to work in the United States for Motiva Enterprises LLC without sponsorship (for example, TN, H-1B, or other employment-based immigration authorization or visa).
Motiva participates in E-Verify.
Motiva will consider qualified applicants for employment without regard to protected characteristics under federal, state, or local laws.

View full job page →

17d ago

Cybersecurity Engineer II

Orion Marine Group Houston, TX

Houston, TX

17d ago

Full time Cloud Platforms Cybersecurity Tools Endpoint Security

Apply Now

Job Description

The IT Cybersecurity Engineer II position provides mid-level engineering support for the architecture, operation, automation, and continuous improvement of Orion Marine Group’s cybersecurity posture across on-premises, cloud, and hybrid environments.

Onsite Location

Houston, TX (onsite)

Key Responsibilities

Assess Orion’s cybersecurity architecture and overall posture, identify gaps, and recommend improvements using security best practices and industry-aligned frameworks, including examples such as NIST, CIS Controls, and Zero Trust principles.
Collaborate with IT leadership to design, evolve, and maintain layered security architecture across endpoint, network, identity, email, and cloud environments based on penetration testing, vulnerability assessments, and audit results.
Convert penetration test and assessment findings into prioritized remediation plans and architectural changes, tracking progress through implementation and closure.
Serve as the primary engineer for enhancement, tuning, and automation of core security platforms, including Darktrace and Microsoft Defender (Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, Defender for Office 365).
Create and maintain automation, scripts, and workflows (including examples such as PowerShell, KQL, and Logic Apps/Sentinel automation or equivalent) to streamline detection, alert triage, response actions, and reporting.
Tune detection rules, alert thresholds, and correlation logic to reduce false positives and improve security signal quality across platforms.
Evaluate emerging security tools and capabilities and recommend enhancements or additions to the security tooling stack.
Own security, access control, and configuration integrity of Orion’s SIEM and SOAR environment, ensuring detection, correlation, and automated response capabilities are hardened against unauthorized access, tampering, or misconfiguration.
Administer role-based access, log source onboarding, and data retention in the SIEM to protect confidentiality and integrity of security event data used for detection, investigations, and audit evidence.
Build, test, and maintain SOAR playbooks and automated response actions, applying change control and peer review to prevent unintended or unauthorized actions in production.
Monitor SIEM/SOAR health, log ingestion completeness, and playbook execution to confirm detection and response coverage does not degrade silently.
Own global endpoint security review, configuration, and administration across Orion locations, devices, and business units.
Monitor endpoint security coverage, policy compliance, and protection status; identify and remediate gaps in onboarding, policy application, or protection posture.
Manage endpoint security policies, attack surface reduction rules, device configuration baselines, and vulnerability management workflows tied to endpoint protection.
Review and respond to endpoint-related alerts and incidents, coordinating containment, remediation, and root-cause analysis.
Monitor security alerts, logs, and telemetry from Darktrace, Microsoft Defender, the SIEM, and related platforms; investigate potential threats and security incidents.
Support incident response activities, including detection, containment, eradication, and post-incident documentation and lessons learned.
Perform vulnerability scanning and risk assessment, coordinating remediation across infrastructure and endpoint environments.
Support CMMC and NIST SP 800-171 compliance activities, including control implementation, evidence collection, audit support, and remediation of identified findings.
Maintain security documentation (architecture diagrams, standard operating procedures, playbooks, and control evidence) to support auditability and operational consistency.
Assist with security risk assessments, policy development, and control reviews in coordination with IT leadership.
Cross-train and maintain proficiency with core on-premises infrastructure platforms managed by the Infrastructure team, including VMware virtualization and Veeam backup and recovery.
Provide backup coverage for infrastructure operations as needed, including virtualization, backup/recovery, storage, and other on-premises systems, to reduce single points of knowledge within the IT team.
Partner with the Infrastructure team on projects and changes with security implications to ensure security requirements are incorporated into infrastructure design and operations.
Maintain accurate technical documentation, including security architecture diagrams, configuration standards, runbooks, and change records.
Identify and communicate opportunities to improve security posture, tooling effectiveness, and operational efficiency, and participate in continuous improvement initiatives.
Coordinate with the Infrastructure team, Service Desk, Applications, vendors, and other stakeholders to resolve incidents, support projects, and ensure smooth handoffs.
Respond to off-hour security alerts, calls, emails, or notifications as needed to maintain security monitoring coverage and operational uptime.
Ensure incident response communications and handoffs are clear, timely, and documented.
Support broader IT and security projects and perform other related administrative and technical duties as assigned by IT leadership.

Requirements

Demonstrated ability to deliver high-quality results with minimal supervision in a fast-paced environment.
Strong communication, analytical, and problem-solving skills, including the ability to explain technical and security concepts to non-technical stakeholders.
Proven ability to learn new technologies and threat landscapes quickly using research, self-directed learning, and hands-on experimentation.
Strong documentation habits and attention to detail, including architecture diagrams, playbooks, and audit evidence.
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent practical experience).
Relevant certifications are preferred (examples: CompTIA Security+/CySA+, Microsoft SC-200/SC-100, CEH, GIAC, or equivalent).
4–8 years of hands-on experience in cybersecurity engineering or security operations, with experience designing, tuning, or automating security tooling.
Strong understanding of cybersecurity architecture principles and security frameworks, with experience aligning to NIST SP 800-171 and supporting CMMC compliance readiness activities.
Hands-on experience with Microsoft Defender (Endpoint, Identity, Cloud Apps, Office 365) and network detection and response platforms such as Darktrace, including tuning, automation, and reporting.
Hands-on experience administering and securing a SIEM and SOAR environment, including access control, log source management, and building or maintaining automated response playbooks.
Experience administering endpoint security at scale, including policy management, attack surface reduction, vulnerability management, and incident response.
Working proficiency with scripting and automation (for example, PowerShell, KQL) to build repeatable security workflows, detections, and reporting.
Working knowledge of virtualization and backup platforms (VMware and Veeam or equivalent) sufficient to cross-train and provide backup support with the Infrastructure team.
Proficient with standard Microsoft productivity tools (Visio, Word, Excel, Outlook, PowerPoint) for documentation, diagrams, reporting, and communication.
Experience supporting security audits, e-discovery technical requests, and handling sensitive data with confidentiality, documented procedures, and access controls is preferred.

Technologies and Frameworks

Darktrace; Microsoft Defender; Defender for Endpoint; Defender for Identity; Defender for Cloud Apps; Defender for Office 365
PowerShell; KQL; Logic Apps; Sentinel automation; SIEM; SOAR
VMware; Veeam
NIST; CIS Controls; Zero Trust principles; NIST SP 800-171
CMMC; CMMC compliance readiness
EDR/XDR; NDR; Identity security; Email security; Vulnerability management
Security monitoring and alerting

Safety and Compliance

Responsible and accountable for the incumbent’s safety.
Responsible and accountable for the safety of co-workers and any other individuals encountered on the job.
Authorized and obligated to stop work when an unsafe condition or situation is anticipated or observed.
Complies with applicable laws, regulations, and Company policies and procedures, and is subject to disciplinary action (including dismissal) for failure to do so.
Reports violations of applicable laws, regulations, and Company policies and procedures promptly, and is subject to disciplinary action (including dismissal) for failure to do so.
Maintains confidentiality and does not disclose confidential, proprietary, or trade secret information belonging to the Company.

Physical and Mental Requirements

Must be able to perform essential functions with or without reasonable workplace accommodation.
Must be able to wear and properly use personal protective equipment if required to work or visit the job site (examples may include hard hat, safety glasses, respirators, ear plugs, steel-toed shoes, personal flotation devices, or other equipment as required).
Must be able to remain calm during emergencies and respond appropriately as directed by the Safety Representative or other management personnel.
Must be able to evacuate the work area promptly in the event of an emergency.