Cyber Security Specialist (Houston)

Empyrean Benefit Solutions • Houston, TX

6d • Hybrid

About The Position

The Cyber Security Specialist serves as a technical authority within Empyrean’s Information Security organization, implementing, maintaining, and enhancing cybersecurity across infrastructure, applications, and cloud environments. The role applies technical expertise in threat detection, incident response, vulnerability management, and cloud security, and collaborates with IT, Engineering, and Compliance to protect systems and data while meeting regulatory and client requirements.

The specialist monitors and manages security tooling, handles security-related tickets, and serves as a trusted advisor and escalation point for complex security issues. The role also contributes to scalable security architectures and standards, supports incident response and disaster recovery, and reports on security posture and improvement initiatives.

The position is based in Houston, Texas, and requires onsite work two days per week. After-hours support may be needed for critical access or incident-related issues.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent work experience.
• 3–5+ years of progressively responsible experience in cybersecurity, information security engineering, or security operations roles.
• Background in incident response, vulnerability management, and security engineering.
• Experience with AWS and/or other cloud security tools and configurations.
• Familiarity with IAM systems such as Okta, Active Directory, and AWS IAM; SIEM platforms such as Splunk or Sentinel; and endpoint protection tools.
• Advanced understanding of cybersecurity principles, technologies, and threat landscapes.
• Expertise in network, endpoint, and cloud security technologies, including SIEM, IDS/IPS, EDR, and firewalls.
• Hands-on experience with vulnerability management, penetration testing, and forensic analysis tools.
• Experience working with security tools such as CrowdStrike, Netskope, Entra, Tenable, EDR, IDS/IPS, firewalls, KnowBe4, ProofPoint, DLP tools, and vulnerability scanners.
• Knowledge of secure system design, architecture review, and cloud configuration best practices.
• Familiarity with NIST CSF, ISO 27001, and SOC 2, and ability to interpret and apply requirements such as HIPAA, SOC, and ISO.
• Strong analytical and problem-solving skills, including the ability to prioritize and manage multiple tasks effectively.
• Excellent communication and collaboration skills across technical and business teams.
• Ability to exercise discretion and sound judgment, with high attention to detail.
• Demonstrated initiative and ownership in developing and executing security improvements.
• Ability to work onsite or in a hybrid capacity as required; this role requires onsite work two days per week.
• Availability for after-hours support as needed for critical access or incident-related issues.
• Must be authorized to work in the United States without sponsorship.

Nice To Haves

• CISSP, CISM, CEH, or an equivalent advanced cybersecurity certification.
• Familiarity with scripting or automation for security operations, such as Python or PowerShell.

Responsibilities

• Lead advanced threat detection, vulnerability assessment, and incident response activities.
• Administer and optimize security tools, including SIEM, CrowdStrike, Netskope, Entra, Tenable, EDR, IDS/IPS, firewalls, KnowBe4, ProofPoint, DLP tools, and vulnerability scanners.
• Analyze security events and alerts, identify root causes, and coordinate remediation with technical teams.
• Work with infrastructure and application owners to incorporate secure-by-design principles into system architecture and the control environment.
• Drive cloud security governance initiatives, including appropriate configuration and monitoring of AWS environments.
• Support general security tickets involving access control, RBAC principles, security engineering, and security practices.
• Develop and maintain security baselines, hardening standards, and operational procedures aligned with NIST CSF, SOC 2, ISO 27001, and HIPAA.
• Support the design and execution of penetration tests, exercises, and risk assessments.
• Contribute to incident response and disaster recovery programs, including forensic investigations and post-incident reviews.
• Provide technical guidance to team members in Security Operations.
• Partner with Compliance and IT leadership on audit readiness and continuous improvement of the control environment.
• Evaluate and implement emerging security technologies to improve protection, detection, and response.
• Independently drive initiatives and team projects, and work with team members to identify suitable controls for exceptions and business-supporting initiatives.
• Prepare and deliver leadership reports on security posture, metrics, and improvement initiatives.
• Assist with employee cybersecurity awareness and training programs.
• Participate in internal and external audits and client security assessments as needed.
• Contribute to enterprise risk assessments and cross-departmental process improvement initiatives.
• Represent Information Security in cross-functional meetings and projects to align business objectives with security strategy.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level