IT Security Engineer

METECS•Houston, TX

About The Position

METECS is seeking an IT Security Engineer to lead security operations and help maintain IT infrastructure. The role combines security program operations with day-to-day administration across Windows, Linux, and cloud environments. Knowledge of NIST SP 800-171 is desired, along with hands-on technical experience. Citizenship or lawful permanent resident status is required due to the federal position. METECS is an engineering and applied technology company providing advanced engineering, software, and analysis solutions for human space flight and terrestrial applications. It develops and integrates custom software for NASA and other government and commercial customers using in-house, commercial, and open-source technologies. Its specialties include robotics automation, embedded systems, hardware/software integration, multibody dynamics simulations, immersive computer graphics, XR systems, and advanced web-based tools. METECS is an Equal Opportunity Employer, including veterans and individuals with disabilities.

Requirements

At least 2 years of IT experience with hands-on security responsibilities.
Experience with logging, vulnerability scanning, and identity and access management tools.
Experience with audits, compliance documentation, and evidence collection.
Strong knowledge of Active Directory, Group Policy, and Microsoft 365 administration.
Hands-on experience with Linux, such as Ubuntu, Red Hat, or similar distributions.
Familiarity with cloud platforms, including AWS and Azure.
Knowledge of networking principles and protocols.
Strong attention to detail and responsibility.
Clear communication skills and the ability to explain technical issues to a non-technical audience.
Citizenship or lawful permanent resident status is required due to the federal position.

Nice To Haves

Working knowledge of ISO 27001 or NIST SP 800-171 requirements.
Experience supporting formal assessments, such as CMMC, ISO 27001, or SOC 2.
Knowledge of virtualization technologies and containerization.
Relevant certifications, such as Windows Server, CISSP, CISM, CompTIA Security+, CompTIA Linux+, or Certified CMMC Professional (CCP).

Responsibilities

Maintain the System Security Plan.
Serve as the primary point of contact for assessments and external audits.
Collect and organize audit evidence for NIST 800-171 and ISO 27001 controls.
Conduct security hygiene activities, including access management, configuration management, change control, and incident response.
Review security logs, investigate anomalies, and escalate findings as needed.
Coordinate vulnerability scanning and remediation.
Support Linux-based systems and servers, including installation, maintenance, and troubleshooting.
Configure and manage Microsoft 365, Exchange, Teams, and SharePoint to ensure security and compliance.
Manage XDR and other security tooling.
Document system configurations, procedures, and security-related processes.