Job description

This is a Cactus Wellhead position and is located in Houston, TX Hybrid: 4 days in office; 1 day working from home JOB SUMMARY: The Cybersecurity Engineer is responsible for executing and supporting key cybersecurity programs and initiatives across the organization. This role operates as a security generalist within a lean, high-impact team and is expected to independently drive efforts spanning vulnerability management, security engineering, incident response, and Zero-Trust identity and access management. This role requires the ability to manage multiple priorities and communicate effectively. The ideal candidate is a proactive, accountable professional who can manage competing priorities, communicate effectively across technical and business teams, and take ambiguous problems through to resolution. This role emphasizes execution and continuous improvement of the organization’s security posture. ESSENTIAL FUNCTIONS, ROLES, AND RESPONSIBILITIES: Essential duties and responsibilities include the following: • Practice safe work habits and comply with all quality, safety, health, environmental policies, procedures, programs, and regulations. • Execute and support cybersecurity programs such as vulnerability management, data security initiatives, and identity-related improvements, as assigned by leadership. • Lead remediation efforts for findings from vulnerability scans, penetration tests, and security assessments by coordinating with internal teams to ensure timely and effective resolution. • Engineer, implement, and improve security controls and solutions across endpoint, identity, cloud, and network environments. • Operate within a modern detection and response environment by reviewing alerts, making risk-based decisions, and handling escalations in coordination with managed security partners. • Participate in incident response activities, including on-call rotation, investigation, playbook maintenance, containment, and recovery efforts. • Design, document, and mature security processes and standard operating procedures to improve operational effectiveness and scalability. • Collaborate with IT, application teams, and business units to integrate security into systems, workflows, and projects. • Support compliance and audit activities in coordination with external partners by providing technical input, documentation, and evidence as required. • Evaluate new and existing technologies to ensure alignment with security best practices and organizational standards. • Contribute to security strategy by identifying gaps, recommending improvements, and driving execution of initiatives. • Generate reports and communicate security posture, risks, and progress to leadership and stakeholders. EDUCATION, TRAINING, EXPERIENCE: • Bachelor’s degree in Information Security/Systems, Computer Science, or other related technical discipline this role supports the organization’s move toward a Zero Trust model, with a focus on strong identity controls, least privilege access, and continuous verification. Create and maintain incident response playbooks. • 5+ years of progressive experience in cybersecurity or security engineering roles CERTIFICATIONS, LICENSES, REGISTRATIONS: • Security Foundations & Engineering: ISC2 SSCP or CISSP; CompTIA Security+ • Cloud Security: Microsoft Azure Security Engineer (AZ-500); AWS Certified Security – Specialty; Google Professional Cloud Security Engineer; ISC2 CCSP • Identity & Access Management: Microsoft Identity and Access Administrator (SC-300); Okta Certified Professional • Security Operations / Detection & Response: Microsoft Security Operations Analyst (SC-200); CompTIA CySA+ JOB KNOWLEDGE, SKILLS, ABILITIES: • Experience working across multiple security domains such as endpoint security, identity and access management, vulnerability management, cloud security, and network security. • Working knowledge of enterprise security technologies and concepts (e.g., XDR/EDR, SIEM, identity protocols such as SAML/OAuth/OpenID, vulnerability management). • Foundational understanding of cloud security principles and applicable toolsets such as CNAPP, CSPM, and CASB. • Familiarity with security frameworks such as NIST CSF, ISO 27001, SOC 2 or similar. • Ability to manage multiple priorities and context switch effectively in a fast-paced environment. • Strong problem-solving skills with the ability to take ownership of tasks and drive them to completion. • Effective communication skills, including the ability to engage with both technical and non-technical stakeholders. • Competency with automation and query languages such as PowerShell, Python, KQL, etc. • Experience leading or contributing to security projects or initiatives. • Demonstrated ability to communicate effectively in meetings and collaborate across teams in a professional environment. • Self-motivated, accountable, and capable of working both independently and collaboratively. SUPERVISORY RESPONSIBILITIES: This role has no supervisory responsibilities. Disclaimer: This job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities required of the employee for this position. Duties, responsibilities, and activities may change at any time with or without notice. Cactus Companies is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, veteran status, genetic information, or any other characteristic protected by law. Safety is our top priority. All employees must comply with our comprehensive safety programs, participate in required safety training, and demonstrate commitment to our safety-first culture. This position may require working in potentially hazardous environments if you are traveling to a branch or plant location. Ensure that you follow all safety guidelines that are required when working in the field, branch or manufacturing facility.

Requirements

Must-haves

This is a Cactus Wellhead position and is located in Houston, TX
Hybrid: 4 days in office; 1 day working from home
ESSENTIAL FUNCTIONS, ROLES, AND RESPONSIBILITIES: Essential duties and responsibilities include the following:
Practice safe work habits and comply with all quality, safety, health, environmental policies, procedures, programs, and regulations.
Execute and support cybersecurity programs such as vulnerability management, data security initiatives, and identity-related improvements, as assigned by leadership.
Lead remediation efforts for findings from vulnerability scans, penetration tests, and security assessments by coordinating with internal teams to ensure timely and effective resolution.
Engineer, implement, and improve security controls and solutions across endpoint, identity, cloud, and network environments.
Operate within a modern detection and response environment by reviewing alerts, making risk-based decisions, and handling escalations in coordination with managed security partners.
Participate in incident response activities, including on-call rotation, investigation, playbook maintenance, containment, and recovery efforts.
Design, document, and mature security processes and standard operating procedures to improve operational effectiveness and scalability.
Collaborate with IT, application teams, and business units to integrate security into systems, workflows, and projects.
Support compliance and audit activities in coordination with external partners by providing technical input, documentation, and evidence as required.
Evaluate new and existing technologies to ensure alignment with security best practices and organizational standards.
Contribute to security strategy by identifying gaps, recommending improvements, and driving execution of initiatives.
Generate reports and communicate security posture, risks, and progress to leadership and stakeholders.
5+ years of progressive experience in cybersecurity or security engineering roles
Security Foundations & Engineering: ISC2 SSCP or CISSP; CompTIA Security+
Cloud Security: Microsoft Azure Security Engineer (AZ-500); AWS Certified Security – Specialty; Google Professional Cloud Security Engineer; ISC2 CCSP
Identity & Access Management: Microsoft Identity and Access Administrator (SC-300); Okta Certified Professional
Security Operations / Detection & Response: Microsoft Security Operations Analyst (SC-200); CompTIA CySA+
Experience working across multiple security domains such as endpoint security, identity and access management, vulnerability management, cloud security, and network security.
Working knowledge of enterprise security technologies and concepts (e.g., XDR/EDR, SIEM, identity protocols such as SAML/OAuth/OpenID, vulnerability management).
Foundational understanding of cloud security principles and applicable toolsets such as CNAPP, CSPM, and CASB.
Familiarity with security frameworks such as NIST CSF, ISO 27001, SOC 2 or similar.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azureawspython

Platform: ukg
Effort: medium