CYBER SECURITY ENGINEER

Custom Truck One Source•Fort Worth, TX

13d•Onsite

About The Position

The Cyber Security Engineer is an owner of the security systems the business runs on. This role designs, integrates, and manages the security platforms and controls that protect the organization, and maintains a working knowledge of the infrastructure, network, and cloud environments those controls operate within — monitoring them for risk without owning their day-to-day administration. Escalations reach this role when issues are genuinely hard or touch the underlying security architecture itself. The Cyber Security Engineer's work is defined as much by projects and platforms as by tickets — standing up new security capabilities, hardening the environment by design, and making the technical decisions that Information Security Analysts and other IT staff build on.

Requirements

Strong working knowledge of network, cloud, and infrastructure security architecture; ability to design solutions rather than just execute predefined procedures.
Ability to lead technical projects from design through implementation.
Strong work ethic and ability to work well with others.
Highly organized, detail-oriented, delivering accurate and polished work.
Excellent listening and communication skills.
Ability to explain complex technical and architectural decisions to both technical and non-technical audiences.
Ability to read and interpret technical documentation and produce clear design and incident documentation.
Good with basic math. Must possess the ability to make mathematical computations with accuracy.
Ability to work with mathematical concepts such as probability and statistical inference, and fundamentals.
Ability to apply concepts such as fractions, percentages, ratios, and proportions to risk analysis and reporting.
Ability to design solutions for problems with no established procedure, and to make sound architectural decisions under ambiguity and time pressure.
Ability to interpret a variety of instructions furnished in written, oral, diagram, or schedule form.
Ability to coordinate several complex, technical projects simultaneously while working under pressure to meet deadlines.
Ability to maintain a positive and flexible attitude and successfully operate under ambiguous guidelines.
Ability to determine the proper course of action for escalated, high-severity security issues.
Ability to create momentum and drive organizational change in security posture.
Ability to solve practical problems involving a variety of concrete variables where only limited standardization exists.
Hands-on experience with security tooling such as SIEM, EDR/XDR, vulnerability scanners, and IAM/PAM platforms.
Excellent planning, organizational, and priority-setting skills.
Well-developed interpersonal and communication skills.
Professional appearance and manner, business casual.
Ability to learn new tools and platforms quickly.
Regularly required to sit.
Frequently required to walk; use hands to finger, handle, or feel; reach with hands and arms; and talk or hear.
Occasionally required to stand.
Frequently lift and/or move up to 10 pounds and occasionally lift and/or move up to 25 pounds.
Specific vision abilities required by this job include close vision, distance vision, color vision, and ability to adjust focus.

Nice To Haves

Scripting or automation experience (e.g., Python, PowerShell) is a plus.
Relevant certifications preferred, such as CISSP, CISM, CEH, Security+, or a cloud security certification (AWS, Azure, or GCP).

Responsibilities

Designs, builds, and owns the security architecture across infrastructure, network, cloud, and applications, including segmentation, identity and access management, and zero-trust controls.
Serves as the escalation point for security incidents and issues that are technically complex or require architectural changes, going beyond day-to-day monitoring and triage.
Leads security projects end to end — evaluating, selecting, and standing up new platforms and capabilities such as SIEM, EDR/XDR, vulnerability management, IAM/PAM, and cloud security posture management tools.
Designs the security hardening standards and baselines for servers, network devices, and cloud environments that other IT teams implement and maintain.
Owns the architecture and controls needed to maintain PCI, SOX, and other compliance requirements, and represents security engineering in internal and external audits.
Leads root cause analysis and technical remediation for significant security incidents, and drives architectural changes that prevent recurrence.
Designs and continuously improves the vulnerability management program, including scanning strategy, risk-based prioritization, and remediation workflows.
Architects security for cloud environments (AWS/Azure/GCP), including network design, identity, encryption, logging, and posture management.
Builds automation and tooling (scripting, infrastructure as code) to reduce manual security work and improve detection and response times.
Performs threat modeling and security risk assessments for new systems and projects prior to go-live.
Provides technical mentorship and guidance to Information Security Analysts and other IT staff on security best practices and tooling.
Evaluates security vendors and technologies, and owns technical vendor relationships for security tooling.
Documents and maintains security architecture diagrams, standards, and runbooks in the organization's knowledge base.
Stays current on emerging threats, security architecture patterns, and industry standards, and translates them into changes to the environment.
Protects the organization's value by keeping information confidential.
Accomplishes organizational goals by taking ownership of new and different initiatives and identifying opportunities to add value beyond assigned tasks.