Cyber Security Engineer; Cloud​/SaaS

Crescent is a differentiated U.S. energy company committed to delivering value through a disciplined, returns-driven growth through acquisition strategy and consistent return of capital. Our long-life, balanced portfolio combines significant cash flow from stable production with a deep, high-quality development inventory. Crescent is a top three producer in the Eagle Ford basin and a scaled operator in each of the Permian and Uinta basins.

Crescent’s leadership is an experienced team of investment, financial and industry professionals that combines proven investment and operating expertise. For more than a decade, Crescent and our predecessors have executed on a consistent strategy focused on cash flow, risk management and returns.

Through disciplined and accretive investments, we have successfully tripled the size of our company since going public in December 2021 while maintaining a strong balance sheet.

The Cybersecurity Engineer (Cloud/SaaS) is responsible for securing and governing cloud platforms, SaaS applications, APIs, AI-driven automation, and enterprise technologies across the organization. This role is critical to protecting the company’s digital assets by strengthening controls around SaaS integrations, machine-driven workflows, centralized logging, and cloud telemetry, while improving the organization’s ability to detect, investigate, and respond to cyber threats across the enterprise.

This position will lead and support the design, implementation, and continuous improvement of cloud and SaaS security controls, centralized logging capabilities, telemetry integrations, detection engineering, and incident response support processes. The ideal candidate brings hands‑on experience with cloud and SaaS security, SIEM and SOC integrations, logging architecture, and security monitoring, along with the ability to partner across cybersecurity, infrastructure, applications, data, and business teams to improve enterprise resilience.

This role will also help define and implement security best practices for agentic AI solutions, automation pipelines, and non-human workflows to ensure these technologies are deployed with appropriate guardrails, visibility, and governance. This individual will play an important role in advancing the company’s cybersecurity posture and supporting its journey toward becoming a secure, technology-enabled, and operationally resilient enterprise.

• Cloud & SaaS Security Secure and govern AI-driven automation, agentic workflows, SaaS platforms, and cloud-connected business processes across the enterprise. Protect SaaS integrations, APIs, automation pipelines, service-to-service connections, and cloud-connected operational workflows from misuse, misconfiguration, excessive privilege, and unauthorized access. Partner with application, infrastructure, and data teams to ensure cloud and SaaS platforms are deployed with appropriate security controls, monitoring, and governance across the enterprise.
  
  Support the development and enforcement of security standards for cloud services, SaaS applications, machine identities, and AI-enabled workflows.
• Centralized Logging, Visibility & Telemetry Enablement Enable, maintain, and continuously improve centralized logging across cloud platforms, SaaS applications, enterprise services, and security tooling. Ensure log integrity, retention, security, and availability are maintained in line with enterprise policy, compliance requirements, and operational needs. Validate logging coverage across critical cloud, SaaS, and enterprise systems and identify gaps that may reduce detection or investigative effectiveness.
  
  Collaborate with platform and infrastructure teams to onboard new systems and services into centralized logging pipelines.
• SIEM, Detection Engineering & SOC Integration Integrate cloud and SaaS telemetry with managed SOC providers, SIEM platforms, and approved security monitoring solutions. Tune detection rules, monitoring logic, and alerting thresholds to improve visibility into SaaS activity, suspicious access behavior, API misuse, AI usage patterns, and anomalous activity across the enterprise. Support SOC…