Senior BISO Engineer – Cybersecurity (WAF / NGFW / SIEM)

Job Title: Senior BISO Engineer – Cybersecurity

Location: Houston, Texas

Employment Type: Contract

Duration: 12 Months

Experience: 5+ years in Cybersecurity Engineering, Security Architecture, or Risk Management

Job Overview

We are seeking an experienced Senior BISO Engineer (Business Information Security Officer) to support cybersecurity initiatives within a business unit in the energy sector.

Key Responsibilities

• Serve as a cybersecurity partner to business, IT, and Operational Technology (OT) stakeholders.
• Identify, assess, prioritize, and mitigate cybersecurity risks across business and technology environments.
• Support the implementation and continuous improvement of security controls, policies, and procedures.
• Work with Web Application Firewalls (WAF), Next-Generation Firewalls (NGFW), Security Information and Event Management (SIEM), and vulnerability management platforms.
• Collaborate with security engineering teams to address vulnerabilities, monitor security posture, and drive remediation activities.
• Apply cybersecurity frameworks and best practices, including NIST Cybersecurity Framework (NIST CSF), CMMC, or equivalent standards.
• Lead cross-functional cybersecurity initiatives with minimal supervision.
• Communicate security risks, remediation plans, and compliance requirements to technical teams and business stakeholders.
• Support security architecture reviews, risk assessments, and security governance activities.
• Contribute to cybersecurity integration activities related to mergers and acquisitions, where applicable.

Required Qualifications

• 5+ years of experience in cybersecurity engineering, security architecture, information security, or cybersecurity risk management.
• Hands-on experience with one or more of the following:
• Web Application Firewall (WAF)
• Next-Generation Firewall (NGFW), preferably Palo Alto Networks
• Security Information and Event Management (SIEM)
• Vulnerability management platforms
• Strong understanding of cybersecurity frameworks, including NIST CSF, CMMC, or equivalent frameworks.
• Proven ability to coordinate cross-functional security programs and manage initiatives independently.
• Strong analytical, problem-solving, communication, and stakeholder management skills.