Principal Cybersecurity Specialist

GFT • Houston, TX

7d • $125,000 - $170,000 • Hybrid

About The Position

GFT is seeking a Principal Cybersecurity Specialist to join its Practice or CBG Team in Texas. The position follows a hybrid work model and requires regular attendance at the Houston, Texas office. The role performs complex technical and professional work to analyze and protect enterprise IT and OT systems, networks, and data. It calls for in-depth cybersecurity knowledge, an understanding of business strategy and operational requirements, and the ability to work in a fast-paced environment.

The specialist provides technical cybersecurity expertise while contributing to business development and client engagement. This includes building and maintaining client relationships, identifying opportunities to expand services, supporting pursuit activities, and helping grow client initiatives. The role translates client needs and cybersecurity challenges into practical solutions and supports the growth of GFT’s cybersecurity practice.

GFT describes the work as including security assessments, risk and vulnerability analysis, incident response and forensic investigations, security metrics and technical documentation, and collaboration with technology teams to incorporate security principles into system design and deployment. The position also contributes to proposals, scopes of work, presentations, client meetings, and other business development activities.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related field plus 5+ years of relevant experience; alternatively, 10+ years of relevant work experience to satisfy the education and experience requirements.
• Professional security-related certification, such as Security+, CISSP, CISM, or CCSP.
• Excellent customer service, communication, and interpersonal skills; ability to work in an integrated team environment and be self-motivated.
• Proficiency securing Windows and Unix-like operating systems, endpoint applications, networking protocols, and devices.
• Experience with industry-standard information security technologies.
• Experience performing technical risk and vulnerability assessments.
• Strong analytical skills and experience working in or supporting a Security Operations Center.
• Understanding of the TCP/IP stack and prior hands-on expertise securing diverse LAN, WAN, VPN, and wireless environments for large organizations.
• Basic understanding of ICS/SCADA cybersecurity controls and concerns.

Nice To Haves

• Expertise in cybersecurity assessments, risk management, governance, and compliance management.
• Experience with operations and security across Amazon Web Services (AWS) and Microsoft Azure.
• Experience working within critical infrastructure systems; rail transport experience is a plus.
• Knowledge of Payment Card Industry (PCI), National Institute of Standards (NIST), Center for Internet Security (CIS), or International Standards Organization (ISO) requirements.
• Experience working with U.S. Government agencies and security requirements from DHS, CISA, and TSA.
• Experience with Palo Alto, Darktrace, and Cisco security products.

Responsibilities

• Lead security assessments of technology systems and recommend changes to ensure compliance with standards, policies, guidelines, strategies, and security best practices.
• Generate, gather, and track security metrics; develop scorecards and communicate results to technology leadership.
• Participate in project and new-technology planning sessions to improve processes within the functional area.
• Build relationships with developers, stakeholders, and security champions to incorporate security principles into engineering design and deployments.
• Research new tactics, techniques, and procedures (TTPs), and work with colleagues to assess risk and implement or validate controls.
• Provide subject matter expertise to resolve problems and security incidents, and conduct forensic investigations.
• Investigate Intrusion Detection System (IDS) alerts and support incident management, forensic investigation, response, and reporting.
• Develop and update technical documentation, including network architecture text and diagrams, security plan controls, and risk assessments.
• Lead evaluation and recommendation of hardware and software systems that provide security functions.
• Support business development and client engagement by identifying emerging client needs, developing opportunities to expand cybersecurity services, and helping position the team for follow-on work.
• Contribute technical expertise to proposals, scopes of work, presentations, client meetings, and other pursuit activities, translating client cybersecurity challenges into practical service solutions.

Benefits

• Hybrid in-person and remote work environment.
• Comprehensive benefits package including wellness programs, parental leave, and pet insurance, in addition to medical, dental, vision, disability, and life insurance.
• Tax-deferred 401(k) savings plan.
• Competitive paid-time-off (PTO) accrual.
• Tuition reimbursement for continued education.
• Professional development, access to internal and external training programs, and support for active participation in professional organizations.
• Incentive compensation for eligible positions.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal