Security Engineer- On-site

Gulf Capital Bank is hiring a Security Engineer (On-site) in Houston, TX to help administer and continuously improve the Bank’s technical security controls. In this role, you’ll provide primary ownership of Palo Alto Networks firewall infrastructure and related network security technologies, while also supporting key Microsoft security tools and security monitoring, incident response, and audit activities. Health coverage, paid time off, and retirement benefits are included.

• Administer, maintain, and support Palo Alto Networks firewalls across all Bank environments.
• Manage firewall policies
  , security rule requests,
  NAT configurations
  , and object administration.
• Configure, maintain, and troubleshoot site-to-site VPN and remote-access VPN connectivity.
• Monitor firewall health, performance, capacity, and availability.
• Perform log analysis and traffic review to identify malicious activity, policy violations, and operational concerns.
• Implement security policy changes in accordance with change management procedures.
• Maintain network segmentation controls that support secure banking operations.
• Configure and support Palo Alto security services including Threat Prevention and Global Protect
  .
• Complete firewall software upgrades, content updates, and security patching activities.
• Support network architecture reviews with security design recommendations.
• Maintain firewall documentation, network diagrams, and configuration standards.
• Participate in disaster recovery and business continuity testing related to network security infrastructure.
• Provide secondary support for Microsoft security solutions, including Microsoft Defender and Microsoft Sentinel
  .
• Monitor and investigate alerts generated through Microsoft Defender and Microsoft Sentinel.
• Support Microsoft Entra security controls and identity protection initiatives, including Conditional Access policy administration and review.
• Support Microsoft Secure Score recommendations and assist with security enhancements across Microsoft cloud services.
• Assist with Microsoft 365 email security and anti-phishing technologies.
• Participate in vulnerability management and remediation activities, and support security assessments and penetration testing.
• Support incident response activities including analysis, containment, eradication, and recovery; collect and preserve evidence and document outcomes, findings, and corrective actions.
• Assist with threat hunting and security monitoring; escalated significant security events according to established procedures.
• Assist with phishing investigations and security awareness support.
• Support regulatory examinations and internal/external audits, including remediation of audit findings and security recommendations.
• Follow Bank security policies, standards, and procedures; support compliance with applicable regulatory and security requirements, and assist with vendor security reviews and third-party risk assessments.

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field, or equivalent combination of education and experience.
• 3 to 5 years of information technology or cybersecurity experience.
• 2+ years of hands‑on firewall administration experience.
• Experience troubleshooting enterprise networking and security technologies.
• Working knowledge of Windows Server and Active Directory environments.
• Strong understanding of TCP/IP networking concepts.
• Knowledge of Palo Alto Networks firewall administration, VPN technologies and troubleshooting, and network routing and switching fundamentals.
• Security logging and event analysis, network segmentation and security policy management, and vulnerability management concepts.
• Windows administration fundamentals, Microsoft 365 administration…