Principal Cybersecurity Specialist

GFT • Houston, TX

12d • Hybrid

About The Position

GFT is seeking a Principal Cybersecurity Specialist to join its Practice or CBG Team in Texas. The position follows a hybrid work model and requires regular attendance at the Houston, Texas office. The role performs complex technical and professional work to analyze and protect enterprise IT and OT systems, networks, and data. It requires in-depth knowledge of cybersecurity technologies and functions, along with an understanding of business goals and operational requirements in a fast-paced environment.

The successful candidate will lead security assessments, recommend security improvements, develop and communicate security metrics, and contribute to process improvement and secure engineering practices. The role includes researching emerging tactics, techniques, and procedures; evaluating and recommending security systems; providing subject matter expertise for security problems and incidents; and conducting forensic investigations. The position also develops and updates technical documentation, including network architecture diagrams and text, security plan controls, and risk assessments.

The Principal Cybersecurity Specialist will also support business development and client engagement by building and maintaining client relationships, identifying opportunities to expand cybersecurity services, contributing technical expertise to proposals and pursuit activities, and translating client challenges into practical service solutions.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related field, plus 5 or more years of relevant experience; 10 or more years of relevant work experience may satisfy the education and experience requirements.
• Professional security-related certification, such as Security+, CISSP, CISM, or CCSP.
• Excellent customer service, communication, and interpersonal skills; ability to work well in an integrated team and be self-motivated.
• Proficiency securing Windows and Unix-like operating systems, endpoint applications, networking protocols, and devices.
• Experience with industry-standard information security technologies.
• Experience performing technical risk and vulnerability assessments.
• Strong analytical skills and experience working in or supporting a Security Operations Center.
• Understanding of the TCP/IP stack and hands-on expertise securing diverse LAN, WAN, VPN, and wireless environments for large organizations.
• Basic understanding of ICS/SCADA cybersecurity controls and concerns.

Nice To Haves

• Expertise in cybersecurity assessments, risk management, governance, and compliance management.
• Experience with operations and security across Amazon Web Services (AWS) and Microsoft Azure.
• Experience working within critical infrastructure systems; rail transport experience is a plus.
• Knowledge of Payment Card Industry (PCI), National Institute of Standards (NIST), Center for Internet Security (CIS), or International Standards Organization (ISO) requirements.
• Experience working with U.S. Government agencies and security requirements from DHS, CISA, and TSA.
• Experience with Palo Alto, Darktrace, and Cisco security products.

Responsibilities

• Lead security assessments of technology systems and recommend changes to ensure adherence to standards, policies, guidelines, strategies, and security best practices.
• Generate, gather, and track security metrics; develop scorecards and communicate results to technology leadership.
• Participate in project and new-technology planning sessions to implement process improvements within the functional area.
• Build relationships with developers, stakeholders, and security champions to incorporate security principles into engineering design and deployments.
• Research new tactics, techniques, and procedures (TTPs), assess risks with colleagues, and implement or validate controls.
• Provide subject matter expertise to resolve problems and security incidents, and conduct forensic investigations.
• Develop and update technical documentation, including network architecture text and diagrams, security plan controls, and risk assessments.
• Lead evaluation and recommendation of hardware and software systems that provide security functions.
• Investigate Intrusion Detection System (IDS) alerts and support incident management, forensic investigation, response, and reporting.
• Support business development and client engagement by identifying emerging client needs and opportunities to expand cybersecurity services.
• Contribute technical expertise to proposals, scopes of work, presentations, client meetings, and other pursuit activities.

Benefits

• Hybrid work environment combining in-person and remote work.
• Comprehensive benefits package, including wellness programs, parental leave, pet insurance, medical, dental, vision, disability, and life insurance.
• Tax-deferred 401(k) savings plan.
• Paid-time-off (PTO) accrual.
• Tuition reimbursement for continued education.
• Professional development, access to internal and external training programs, and support for participation in professional organizations.
• Incentive compensation for eligible positions.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior