Cyber Security Engineer

Meneses Law PLLC • Houston, TX

133d • $70,000 - $90,000

About The Position

The Cyber Security Engineer is responsible for designing, implementing, and maintaining robust security measures to protect the organization's data, systems, and networks from cyber threats. This role involves assessing vulnerabilities, deploying security tools, monitoring for potential threats, and ensuring compliance with industry regulations and best practices. The ideal candidate will have experience in penetration testing, vulnerability management, and securing enterprise systems, along with a solid understanding of network security and regulatory compliance.

Requirements

• In-depth knowledge of firewalls, SIEM, antivirus software, and endpoint protection systems.
• Strong understanding of networking protocols including OSI Model, TCP/IP, DNS, VPNs, HTTP/S, End to End encryption protocols.
• Familiarity with securing cloud environments (AWS, Azure).
• Proficiency in scripting languages such as Python, PowerShell, or Bash for automation and threat detection.
• Experience with tools like Rapid7, Nessus, Metasploit, Burp Suite, or Kali Linux for vulnerability scanning and penetration testing.
• Ability to analyze security logs from network and system devices to identify and mitigate threats.
• Familiarity with cybersecurity frameworks like NIST CSF, CIS Controls, ISO 27001, and understanding of security best practices.
• Knowledge of regulatory requirements including HIPAA, PCI-DSS, and their implementation in organizational security frameworks.
• Strong ability to analyze complex security problems and provide effective solutions.
• Excellent written and verbal communication skills for preparing security reports and presenting findings to both technical and non-technical stakeholders.
• Eagerness to stay current with emerging cyber threats, security technologies, and methodologies.

Nice To Haves

• Certified Information Systems Security Professional (CISSP)
• Certified Ethical Hacker (CEH)
• CompTIA Security+
• Microsoft Excel & PowerPoint
• Certified Information Security Manager (CISM)
• Certified Cloud Security Professional (CCSP)
• Offensive Security Certified Professional (OSCP)
• Proficiency in Linux, with experience in using Kali Linux for penetration testing and vulnerability analysis.
• Hands-on experience with networking protocols and technologies, such as OSI Model, routers, switches, and firewalls.
• Proven experience in penetration testing, including conducting red team exercises and vulnerability exploitation.

Responsibilities

• Develop and implement security protocols, policies, and architecture to safeguard organizational assets.
• Configure, maintain, and optimize firewalls, intrusion detection/prevention systems (IDS/IPS), VPNs, and endpoint security tools.
• Conduct regular vulnerability assessments and penetration testing to identify and resolve security weaknesses.
• Evaluate and mitigate security risks by recommending system upgrades, patches, and secure configurations.
• Ensure compliance with industry regulations and standards such as NIST, ISO 27001, HIPAA, and PCI-DSS.
• Monitor networks, systems, and applications for suspicious activity or breaches, leveraging SIEM tools and other monitoring solutions.
• Lead investigations of security incidents, conduct root cause analysis, and implement corrective actions.
• Develop and execute incident response plans and conduct regular security drills to ensure preparedness.
• Promote cybersecurity awareness across the organization, focusing on topics like phishing, social engineering, and password hygiene.
• Work closely with IT, DevOps, and other departments to integrate security controls into all business processes and platforms.
• Liaise with third-party vendors to assess and manage risks associated with external systems and software.
• Maintain accurate and up-to-date documentation of security policies, incident reports, and audit trails.
• Effectively investigate security incidents in a timely manner, in coordination with the Incident Response (IR) team.
• Prepare and deliver detailed daily, weekly, and monthly security reports for executive leadership.
• Participate in a rotating on-call schedule to support security operations and incident response as needed.
• Lead or contribute to the planning, development, and implementation of assigned cybersecurity initiatives.
• Perform any other tasks or functions deemed necessary to the daily operations of the employer.

Benefits

• High Associate Salaries
• Work with state-of-the-art technology
• Name Recognition & Prestige Immigration Law Firm
• Sophisticated, Challenging Work
• Structured Training Programs
• Meaningful Career Advancement Opportunities
• Excellent Benefits (Medical (80% ER contribution, Dental (No-Cost to employee), Vision, Life Insurance (Paid), 2 weeks of PTO, 10 days of paid holidays)
• Work Life Balance Schedule
• Birthday and Anniversary rewards

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Bachelor's degree
• Number of Employees: 101-250 employees