Principal Cybersecurity Specialist

GFT. • Houston, TX

1d • $125,000 - $170,000 • Hybrid

About The Position

GFT is seeking a Principal Cybersecurity Specialist to join its Practice or CBG Team in Texas. The position follows a hybrid work model and requires regular attendance at the Houston, Texas office. Although the posting title is Principal Cybersecurity Specialist, the role description refers to the position as a Senior Cybersecurity Analyst. The role performs complex technical and professional work analyzing and protecting enterprise IT and OT systems, networks, and data. It requires in-depth knowledge of cybersecurity technologies and functions, along with an understanding of business goals, strategy, and operational requirements in a fast-paced environment.

The successful candidate will combine cybersecurity expertise with client-facing and business development capabilities. The role contributes to client relationships, identifies opportunities to expand services, supports pursuit activities, and helps grow client initiatives. Responsibilities include leading security assessments, advising on security controls and systems, developing and communicating metrics, supporting incident response and forensic investigations, and incorporating security principles into engineering and technology deployments.

GFT is a privately held AEC firm serving transportation, water, power, and buildings. The company reports having more than 5,000 employees. Compensation for this role is $125,000–$170,000, dependent on experience and geographic location. Employment status is full-time. Successful candidates must complete a criminal background check.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related field, plus 5 or more years of relevant experience.
• At least 10 years of relevant work experience may satisfy the education and experience requirements.
• Professional security-related certification, such as Security+, CISSP, CISM, or CCSP.
• Excellent customer service, communication, and interpersonal skills; ability to work collaboratively in an integrated team and self-motivation.
• Proficiency securing Windows and nix operating systems, endpoint applications, networking protocols, and devices.
• Experience with industry-standard information security technologies.
• Experience performing technical risk and vulnerability assessments.
• Strong analytical skills and experience working in or supporting a Security Operations Center.

Nice To Haves

• Expertise in cybersecurity assessments, risk management, governance, and compliance management.
• Experience with operations and security across Amazon Web Services (AWS) and Microsoft Azure.
• Experience working within critical infrastructure systems; rail transport experience is a particular plus.
• Knowledge of Payment Card Industry (PCI), National Institute of Standards (NIST), Center for Internet Security (CIS), or International Standards Organization (ISO) requirements.
• Experience working with U.S. Government agencies and security requirements from DHS, CISA, and TSA.
• Experience with Palo Alto, Darktrace, and Cisco security products.

Responsibilities

• Lead security assessments of technology systems and recommend changes to ensure adherence to standards, policies, guidelines, strategies, and security best practices.
• Generate, gather, and track security metrics; develop scorecards; and communicate results to technology leadership.
• Participate in project and new-technology planning sessions to improve processes within the functional area.
• Build relationships with developers, stakeholders, and security champions to incorporate security principles into engineering design and deployments.
• Research new tactics, techniques, and procedures (TTPs), including in public and closed forums, and work with colleagues to assess risk and implement or validate controls.
• Provide subject matter expertise to resolve problems and security incidents, and conduct forensic investigations.
• Apply knowledge of the TCP/IP stack and secure LAN, WAN, VPN, and wireless environments for large organizations.
• Develop and update technical documentation, including network architecture text and diagrams, security plan controls, and risk assessments.
• Lead evaluation and recommendation of hardware and software systems that provide security functions.
• Investigate Intrusion Detection System (IDS) alerts and support incident management, forensic investigation, response, and reporting.
• Support business development and client engagement by identifying emerging client needs, developing opportunities to expand cybersecurity services, and helping position the team for follow-on work.
• Contribute technical expertise to proposals, scopes of work, presentations, client meetings, and other pursuit activities, translating client cybersecurity challenges into practical service solutions.

Benefits

• Hybrid work environment combining in-person and remote work.
• Comprehensive benefits package, including wellness programs and parental leave.
• Pet insurance.
• Medical, dental, vision, disability, and life insurance.
• Tax-deferred 401(k) savings plan.
• Competitive paid-time-off (PTO) accrual.
• Tuition reimbursement for continued education.
• Professional development, access to internal and external training programs, and support for participation in professional organizations.
• Incentive compensation for eligible positions.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior