> Markdown version of [/jobs/ext/2998616-cybersecurity-engineer](https://www.wearedevelopers.com/jobs/ext/2998616-cybersecurity-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Engineer

- **Company:** Marathon Petroleum
- **Location:** Kendalia, TX, United States
- **Experience:** Expert
- **Salary:** $130,000.0 - $172,000.0
- **Contract:** Permanent contract
- **Skills:** Computer-Aided Design, Amazon Web Services, Microsoft Azure, Cloud Computing Security, Python (Programming Language), Smartsuite, Security Information and Event Management, Scripting, RSA Archer Platform, Security Orchestration, Automation & Response
- **Published:** September 19, 2026
- **Apply:** https://find.jobs/jobs-near-me/apply/ats-redirect/?id=2977273570-2

## About the Role

* Cybersecurity engineering
 * Governance, Risk & Compliance (GRC)
 * Continuous control monitoring (CCM)
 * Security automation (e.g., SOAR, scripts)
 * NIST CSF / NIST 800-53 frameworks
 * ISO 27001/2 compliance
 * Cloud security (AWS/Azure)
 * Security tooling integration (SIEM, GRC tools)
 * Risk assessment and remediation
 * Scripting (Python/Power
 * Shell)

## Description

Marathon Petroleum seeks a Senior Cybersecurity Engineer focused on GRC automation and continuous control monitoring for its complex refining and logistics operations. In this role, you will design and implement automated security controls, integrate GRC platforms with security tools, and build monitoring dashboards to strengthen compliance with NIST, ISO 27001, and internal policies. You will partner with IT, OT, and compliance teams to assess risks, remediate control gaps, and streamline evidence collection, supporting a performance-driven, safety-focused, and environmentally responsible energy enterprise., * Design and maintain automated cybersecurity and compliance controls across IT and OT environments

 * Implement and enhance continuous control monitoring for security and regulatory requirements
 * Integrate GRC platforms with security tools to streamline evidence collection and reporting
 * Conduct risk assessments, identify control gaps, and drive remediation plans
 * Develop dashboards and metrics to track control effectiveness and compliance posture
 * Collaborate with IT, OT, and compliance teams to embed security into energy operations
 * Support audits and regulatory reviews with automated control evidence and reporting
 * Document standards, procedures, and automation runbooks for GRC processes


## Related Videos

- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)