Cyber Security Engineer

Alderson Loop is seeking two Senior Cybersecurity Engineers to support an enterprise organization in the energy and utilities sector. These individuals will help identify, assess, prioritize, and remediate cybersecurity risk across a growing and evolving technology environment.

These are technical advisory roles requiring enough hands‑on knowledge to understand security issues, recommend appropriate solutions, guide technical teams through remediation, and communicate risk clearly to the business.

Key Responsibilities

• Assess and prioritize vulnerabilities and cybersecurity risks across enterprise environments
• Develop remediation strategies and guide application, network, infrastructure, cloud, and other technical teams through resolution
• Manage security issues from identification through remediation and validation
• Provide technical guidance across Vulnerability Management, App Sec, network, cloud, and/or OT security
• Translate technical security issues into clear business risk and recommended actions
• Support cybersecurity needs associated with new technologies, legacy environments, integrations, and acquisitions
• Partner with business and technical stakeholders across a large enterprise environment

Required Qualifications

• 8+ years of cybersecurity experience preferred;
  strong candidates with fewer years will be considered
• Strong technical depth in one or more of the following:
• Enterprise Vulnerability Management
• OT/ICS Security
• Broad understanding of cybersecurity fundamentals, including application and network security
• Experience assessing security risk and developing actionable remediation strategies
• Ability to explain technical cybersecurity concepts clearly to both technical and non‑technical stakeholders
• Experience with in large, complex enterprise environments
• Must be comfortable working onsite in Houston 5 days/week

Preferred

• Energy, utilities, or critical infrastructure experience
• AWS/cloud security experience
• App Sec / OWASP knowledge
• WAF, firewall, network segmentation, or Zero Trust experience
• CISSP, CISM, CRISC, AWS, or comparable certifications