> Markdown version of [/jobs/ext/4605743-cybersecurity-engineer](https://www.wearedevelopers.com/jobs/ext/4605743-cybersecurity-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Engineer - **Company:** Enchanted Rock, LLC - **Location:** Houston, TX, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Software System Penetration Testing, Cloud Computing, CompTIA Security+, Cyber Security, Information Systems, Supervisory Control and Data Acquisition (SCADA), Internet Security, Intrusion Detection and Prevention, Intrusion Detection Systems, OSI Models, Log Analysis, Network Forensics, Performance Tuning, Security Information and Event Management, TCP/IP, Software Vulnerability Management, IT General Controls (ITGC), Computer Equipment, Information Technology, Cybercrime, Smartgrid - **Published:** November 6, 2026 - **Apply:** https://www.careerbuilder.com/job-details/cybersecurity-engineer-houston-tx--fb575790-5bf5-476f-b061-3f322a727461 ## About the Role Internet Security, Electricity, Smart Grid, Cost Control, Customer Support/Service, Risk, Internet Security, Incident Response, Risk Management, Computer Security, * Bachelor's degree in computer science, Information Systems, or equivalent education or work experience * 4+ years of prior relevant experience * Hold Cybersecurity certifications (Security+, SSCP, GSEC, CRISC) and/or specific training and certification in security risk management and IT controls frameworks, such as NIST 800-39, 800-30, 800-53, or CSF. Competency in: * Strong written and verbal communication (technical + non-technical audiences) * Project and initiative ownership * Attention to detail with an audit and risk mindset * Critical thinking and problem-solving * Ability to mentor and uplift team members * Comfortable operating both independently and as part of a team, * Advanced understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth, and common security elements. * Deep understanding of networking (TCP/IP, ports, protocols, OSI model, traffic flows) * Hands-on experience with log analysis, threat investigation, and incident response * Experience with vulnerability management platforms and remediation workflows * Proficiency with security tools such as: o EDR / MDR o SIEM (engineering, tuning, and use cases) o IDS/IPS o Endpoint and network forensics tools * Strong understanding of modern security architecture (identity, cloud, endpoint, network) * Experience supporting or operating security monitoring and detection capabilities at scale Physical requirements and working conditions: * Must possess mobility to work in a standard office setting. * Must be able to use standard office equipment, including a computer. * Stamina to maintain attention to detail despite interruptions. * Strength to lift and carry [computer equipment weighing up to 20lbs]. * Vision to read printed materials and a computer screen. * Hearing and speech to communicate in person and over the telephone. Preferred Qualifications: * Bring a strong GRC foundation but can translate governance requirements into real technical controls * Have hands-on experience with NERC CIP or regulated environments * Can independently drive risk, compliance, and security improvement initiatives end-to-end * Naturally operate as a technical leader and mentor, even without formal direct reports * Balance strategic thinking with hands-on execution ## Description * Design, implement, and maintain enterprise-grade security solutions aligned with regulatory requirements and frameworks (e.g., NIST, NERC CIP) * Operate with a high degree of independence, driving security initiatives end-to-end from design through implementation * Monitor, detect, and respond to cyber threats and vulnerabilities across IT and OT environments * Lead or support incident response activities, ensuring timely containment, remediation, and documentation * Maintain and improve incident response playbooks, runbooks, and tabletop exercises * Conduct risk assessments, vulnerability scans, and remediation tracking, focusing on measurable risk reduction * Track emerging threats and translate threat intelligence into improved detections and controls * Perform and support security validation activities, including penetration testing and control testing * Translate GRC requirements into practical technical controls and sustainable processes * Support and enforce security policies, standards, and procedures, ensuring audit readiness * Contribute to and evolve security architecture across identity, network, cloud, and OT environments * Collaborate with IT and business teams to embed security into systems and operations * Implement, tune, and optimize security technologies (SIEM, EDR, IDS/IPS, etc.) * Analyze logs and alerts to identify and investigate suspicious activity * Support implementation of data protection and encryption controls * Prepare and maintain security documentation and audit artifacts * Support third-party risk management and vendor security reviews * Provide technical guidance and mentor team members, acting as a deputy when needed * Promote a culture of security awareness and continuous improvement * Support security of OT/ICS environments, including SCADA systems and NERC CIP-aligned controls, * Security controls are effectively implemented, monitored, and continuously improved, reducing overall organizational risk. * Cybersecurity initiatives are delivered end-to-end with minimal oversight, demonstrating strong ownership and accountability. * Threats and vulnerabilities are identified early and addressed proactively, with measurable improvements in detection and response times. * Incident response is well-coordinated, documented, and repeatable, with clear lessons learned driving ongoing improvements. * Compliance requirements (e.g., NERC CIP, NIST) are translated into sustainable, auditable technical controls with minimal operational friction. * Security tools (SIEM, EDR, etc.) are well-tuned and producing high-quality, actionable alerts rather than noise. * Risk assessments and remediation efforts result in clear, measurable risk reduction across IT and OT environments. * Security documentation, runbooks, and audit artifacts are accurate, up-to-date, and audit-ready at all times. * Cross-functional teams actively engage with and trust cybersecurity, reflecting strong collaboration and practical security integration. * The individual is recognized as a go-to technical leader and mentor, capable of stepping in to lead initiatives or guide the team when needed.