Senior Cybersecurity Engineer | Camden Corporate Office (Remote Position)

Camden • Houston, TX

12d • Remote

About The Position

The Senior Cybersecurity Engineer is a senior-level technical position within Camden’s Information Technology Department responsible for the design, implementation, administration, monitoring, and continuous improvement of enterprise security technologies and infrastructure protection controls. This role provides hands-on engineering ownership for security platforms, vulnerability and exposure management, infrastructure hardening, cloud and identity security, automation, audit support, and incident response. The position works closely with infrastructure, cloud, networking, application development, operations, audit, and business teams to ensure Camden systems, applications, data, and technology services are protected against evolving threats. The Senior Cybersecurity Engineer is expected to operate with a high degree of technical independence, serve as a subject matter expert for security engineering and control implementation, and contribute to security roadmaps, standards, documentation, and operational procedures. This role bridges traditional security analyst responsibilities with broader systems and security engineering duties, helping ensure Camden maintains secure, resilient, and supportable technology environments.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field preferred.
• Equivalent combination of education, certifications, and professional experience may be considered.
• Seven or more years of progressive Information Technology experience preferred.
• Five or more years of experience in cybersecurity engineering, infrastructure security, security operations, vulnerability management, systems administration, or related technical areas preferred.
• Experience supporting enterprise security platforms, Microsoft-centric environments, cloud services, identity systems, and infrastructure operations.
• Experience working with cross-functional technical teams to remediate findings, implement controls, deliver projects, and support production technology environments.
• Strong understanding of enterprise computing environments, distributed applications, cloud services, identity systems, networking, endpoint security, and system hardening practices.
• Ability to analyze complex technical problems, identify root cause, recommend practical solutions, and communicate recommendations clearly.
• Ability to balance risk reduction, business priorities, operational constraints, and user experience when recommending security improvements.
• Strong written and verbal communication skills with the ability to communicate effectively across technical teams, business stakeholders, and leadership.
• Ability to successfully manage time, technical responsibilities, competing priorities, and deliverable deadlines in a collaborative environment.
• Demonstrated ability to document technical processes, create diagrams, develop standards, and contribute to repeatable operational procedures.
• Must maintain strict confidentiality and security of personnel records and information

Nice To Haves

• CISSP or Associate of ISC2
• CompTIA Security+
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• GSEC, GIAC, CEH, SSCP, or equivalent security certification
• Security Platforms - SIEM, EDR/XDR, vulnerability management, threat intelligence, DLP, IDS/IPS, web/email filtering, endpoint protection
• Microsoft Security - Microsoft Defender, Microsoft Sentinel, Microsoft 365 security, Entra ID, Azure security controls, Conditional Access, Identity Protection
• Infrastructure - Windows Server, Linux/Unix, Active Directory, virtualization, storage, network security, firewall and access control concepts
• Cloud and SaaS - Azure, Microsoft 365, cloud security posture, SaaS security reviews, cloud-hosted applications and services
• Automation - PowerShell, Python, APIs, workflow automation, reporting automation, dashboard development, operational scripting
• Frameworks and Methods - NIST, CIS Controls, MITRE ATT&CK, OWASP, CVSS, SOX controls, risk management, secure configuration standards

Responsibilities

• Design, implement, maintain, and optimize enterprise security controls and technologies across endpoint, server, network, identity, cloud, and application environments.
• Administer and support security platforms used for detection, prevention, monitoring, vulnerability assessment, asset visibility, endpoint protection, log collection, correlation, alerting, and reporting.
• Develop and maintain secure configuration baselines, system hardening standards, security control procedures, and technical implementation guidance.
• Research, evaluate, test, and recommend new or improved security technologies that support Camden business needs and reduce risk.
• Participate in technology architecture reviews, solution design sessions, and project planning activities to ensure appropriate security controls are included early in the lifecycle.
• Author and maintain technical documentation, architecture diagrams, operational runbooks, standards, and procedures related to systems and security platforms.
• Lead or support continuous asset discovery, vulnerability assessment, prioritization, remediation tracking, and exposure management across enterprise technology environments.
• Prioritize remediation based on business risk, exploitability, criticality, compensating controls, threat intelligence, and operational impact.
• Partner with infrastructure, application, database, cloud, and business teams to drive timely remediation of vulnerabilities and security configuration findings.
• Validate remediation completion through vulnerability rescans, manual verification, control testing, and supporting evidence review.
• Develop recurring vulnerability metrics, dashboards, and management reporting that clearly communicate risk reduction, remediation progress, and areas requiring leadership attention.
• Assist with attack surface reduction, secure configuration validation, legacy system risk review, and technical remediation planning.
• Analyze, troubleshoot, and investigate security events, alerts, system anomalies, suspicious activity, network traffic, endpoint telemetry, cloud logs, and automated security notifications.
• Participate in incident response activities including triage, investigation, containment, eradication, recovery, documentation, and post-incident improvement efforts.
• Support the Security Incident Response Team during security events, tabletop exercises, and response planning activities.
• Assist with detection engineering, log source validation, alert tuning, threat hunting, and security monitoring use case development.
• Coordinate with internal IT teams, managed service providers, vendors, and other partners during incident investigations and technical response activities.
• Document root cause, business impact, technical findings, corrective actions, and lessons learned from security events.
• Support security controls and operational processes across Microsoft 365, Azure, Entra ID, Defender, Sentinel, and related cloud-hosted services.
• Assist with identity governance, privileged access, conditional access, multi-factor authentication, passwordless authentication, role-based access control, and Zero Trust initiatives.
• Review cloud and SaaS configurations for alignment with Camden security standards, regulatory needs, and industry best practices.
• Monitor cloud security posture, recommend remediation activities, and collaborate with platform owners to reduce misconfiguration and identity-related risk.
• Support secure onboarding and operational review of new cloud services, integrations, applications, and third-party technology platforms.
• Develop and maintain automation using PowerShell, Python, APIs, workflow tools, and cloud-native automation capabilities to improve security operations and reporting.
• Automate security reporting, asset inventory reconciliation, vulnerability discovery, evidence collection, compliance validation, alert enrichment, and operational workflows where appropriate.
• Identify opportunities to reduce manual effort, improve repeatability, increase accuracy, and strengthen operational controls.
• Create or enhance dashboards, reports, and scripts that improve visibility into security posture and operational performance.
• Support integrations between security platforms, infrastructure systems, ticketing processes, monitoring tools, and reporting solutions.
• Support internal audit, external audit, SOX compliance, security control assessments, and technology risk management activities.
• Assist with evidence gathering, control validation, remediation tracking, and documentation for security and infrastructure controls.
• Participate in third-party security reviews, vendor risk assessments, technology due diligence, and security requirements discussions.
• Develop, maintain, and improve information security procedures, standards, technical guidance, and operational documentation.
• Support disaster recovery, business continuity, continuity of operations, and resilience exercises involving security and infrastructure platforms.
• Provide management with clear, risk-based recommendations regarding ongoing needs, issues, technology improvements, and process optimization opportunities.
• Serve as a technical subject matter expert for security engineering, infrastructure protection, vulnerability management, and enterprise security controls.
• Lead medium-sized security and technology initiatives from requirements gathering through implementation, documentation, and operational handoff.
• Mentor analysts, engineers, administrators, and junior team members on security technologies, troubleshooting methods, and secure operational practices.
• Build strong working relationships with infrastructure, applications, service desk, networking, database, audit, compliance, and business stakeholders.
• Communicate technical concepts, risk, remediation options, and project status effectively to both technical and non-technical audiences.
• Provide off-hours support as needed for urgent security events, critical system issues, maintenance activities, or business-impacting incidents.

Benefits

• Job is intermittently sedentary but requires mobility (i.e., climb stairs)
• Will use some repetitive motion of hand-wrist in using computer and writing
• Works in a typical office setting
• Emotional stability and personal maturity are important attributes in this position
• Must handle stressful, urgent, novel and diverse work situations on a daily basis
• May require long hours and odd schedules (including weekends)
• Position requires periodic travel by automobile to handle work-related activities
• May require airline travel, out-of-town and /or overnight trips
• Attendance and punctuality is essential for success in this position
• Hazards can be minimized with proper lifting techniques, SDS, general safety training, and wearing appropriate PPE
• Contact your HR team for the position’s Physical Demands Analysis

What This Job Offers

• Job Type: Full-time
• Career Level: Senior