We're looking for an Information Security Engineer to protect the systems our business runs on. You'll build and operate the controls that keep our network, cloud, and applications secure, from monitoring and hardening to incident response and remediation. This is a hands-on engineering role, where you'll work directly with IT, development, and leadership to identify real risks, fix them, and prove that our security program works. Based in Bellaire, Texas, supporting our Houston-area operations. Responsibilities Implement and maintain security controls across endpoints, network, cloud, and applications Engineer and tune detection and monitoring tooling (SIEM, EDR, firewalls, IDS/IPS) Conduct vulnerability assessments and coordinate remediation with system owners Lead technical response to security incidents, from triage through root cause analysis Automate security tasks and operational workflows with scripting Support secure configuration and hardening standards for servers, cloud services, and containers Perform security reviews of new infrastructure, vendors, and application changes Contribute to audits, risk assessments, and compliance efforts such as SOC 2 or

ISO 27001

Stay current on threats and communicate practical guidance to non-technical teams Qualifications and Skills Bachelor's degree in computer science, information security, or a related field, or equivalent practical experience Three or more years of experience in information security, preferably in a security engineering role Hands-on experience with at least one major cloud platform (AWS, Azure, or GCP) Strong networking fundamentals: TCP/IP, DNS, firewalls, VPNs, and common attack techniques Proficiency with scripting in Python, Bash, or PowerShell for automation Practical experience with security tooling - SIEM, endpoint detection, vulnerability scanners Understanding of vulnerability management, patching, and secure development practices Clear written communication and the ability to work across technical and business teams Ability to pass a background check Preferred qualifications (good to have, not required): Security certifications such as CompTIA Security+, CEH, GSEC, or CISSP Experience with infrastructure as code (Terraform) and container security (Docker, Kubernetes) Familiarity with log management and incident response frameworks (NIST, MITRE ATT&CK) Experience supporting

SOC 2, ISO

27001, or HIPAA compliance Prior experience in energy, healthcare, financial services, or another regulated industry

Compensation and Benefits Salary:

$120,000 - $130,000 per year, based on experience, with salary review after every 6 months. Medical, dental, and vision insurance 401(k) with company match Paid time off and holidays Certification reimbursement (Security+, CISSP, and similar) On-call compensation where applicable Apply Today Attach your updated resume including a short note on a security incident or vulnerability you helped resolve. We are an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Pay:

$120,000.00 - $130,000.00 per year

Benefits:

401(k) Dental insurance Health insurance Health savings account Life insurance Paid time off Parental leave Referral program Vision insurance

Work Location:

In person