Cyber Security Engineer (IAM)

Crescent Energy • Houston, TX

1d

About The Position

The Cybersecurity Associate is responsible for supporting the day-to-day operations of the organization’s cybersecurity program through monitoring, triage, reporting, service request fulfillment, and security operations support. This role plays an important part in protecting the company’s digital assets by helping identify potential threats, supporting response activities, and ensuring security processes are executed consistently across enterprise systems and platforms.
This position will support security monitoring, incident triage, vulnerability tracking, logging and SIEM coordination, awareness activities, and operational reporting. The ideal candidate brings foundational cybersecurity knowledge, strong analytical skills, and a proactive mindset with the ability to work across cybersecurity, infrastructure, applications, and business teams. This individual will contribute to improving cyber resilience, strengthening operational discipline, and supporting the company’s journey toward becoming a secure, technology-enabled, and data-driven enterprise.

Requirements

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field preferred.
• Equivalent practical experience will be considered.
• 1–3 years of experience in cybersecurity, IT support, security operations, or related technical roles preferred.
• Exposure to security monitoring, incident response, vulnerability management, or SIEM platforms is preferred.
• Familiarity with cybersecurity concepts such as phishing, malware, identity security, logging, and vulnerability remediation is preferred.
• Upstream oil and gas experience is strongly preferred.
• Foundational understanding of cybersecurity operations, threat monitoring, incident triage, and risk reduction practices.
• Strong attention to detail and ability to document findings, actions, and trends accurately.
• Analytical mindset with the ability to investigate alerts, organize information, and support decision-making.
• Ability to manage multiple priorities and follow established processes in a fast-paced environment.
• Strong collaboration skills with the ability to work across cybersecurity, infrastructure, applications, and business teams.
• Clear communication skills with the ability to explain issues, requests, and findings in a professional and understandable manner.

Nice To Haves

• Relevant certifications such as Security+, Network+, SC-900, or other entry-level cybersecurity certifications are a plus.
• Experience working with ticketing systems, reporting tools, and operational dashboards is a plus.

Responsibilities

• Monitor security alerts and events across approved security tools and platforms.
• Review and validate potential threats, suspicious activity, and anomalous behavior for appropriate escalation.
• Assist in identifying false positives, documenting findings, and improving alert handling processes.
• Support continuous monitoring efforts to improve visibility into enterprise security events and risks.
• Support incident triage, investigation, and response efforts in coordination with internal cybersecurity personnel and external partners.
• Gather initial evidence, document findings, and help track response actions through closure.
• Escalate confirmed or high-risk events in accordance with established procedures.
• Assist with post-incident documentation, lessons learned, and follow-up remediation tracking.
• Manage and respond to cybersecurity-related service requests in a timely and professional manner.
• Coordinate with users, IT teams, and security stakeholders to fulfill access, policy, logging, and other security-related requests.
• Track request status, document actions taken, and ensure proper closure and communication.
• Identify recurring request patterns and suggest process improvements where appropriate.
• Support proper logging and SIEM integration across systems, platforms, and security tools.
• Assist with onboarding log sources, validating data flow, and identifying visibility gaps.
• Help maintain monitoring coverage by working with infrastructure, cloud, application, and security teams.
• Support security operations processes that strengthen detection, investigation, and response capabilities.
• Track vulnerability remediation efforts across systems and teams to support timely risk reduction.
• Assist with compiling remediation status, follow-ups, and exception tracking.
• Support reporting on vulnerabilities, open risks, and remediation progress for cybersecurity leadership.
• Help coordinate with technical owners to ensure remediation actions are documented and visible.
• Deliver security awareness and training support through coordination, communication, and follow-up activities.
• Assist in preparing awareness content, phishing campaign support, and user education materials.
• Promote cybersecurity best practices and reinforce awareness of common threats and secure behaviors.
• Support ongoing efforts to strengthen the organization’s security culture.
• Generate security metrics, dashboards, and trend reports to support operational visibility and leadership reporting.
• Help analyze trends in alerts, incidents, vulnerabilities, and service requests to identify improvement opportunities.
• Stay informed on emerging threats, techniques, and cyber risks, and apply relevant insights to day-to-day operations.
• Support documentation and reporting that improves program maturity, consistency, and accountability.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level