Cactus Wellhead - Cybersecurity Engineer

Cactus Wellhead; Houston (TX); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Cactus Wellhead is seeking a Cybersecurity Engineer in Houston, TX. The role requires leading security programs across vulnerability management, data security, and identity improvements while coordinating with a lean security team to improve the organization’s security posture.

The ideal candidate will manage multiple priorities, communicate effectively with technical and business teams, and drive security initiatives from concept to resolution.

Qualifications

• Bachelor’s degree in Information Security/Systems or related field.
• 5+ years of progressive cybersecurity or security engineering experience.
• Experience across endpoint, identity, cloud, and network security.

Responsibilities

• Execute and support cybersecurity programs such as vulnerability management and data security.
• Lead remediation efforts for findings from vulnerability scans and tests.
• Engineer, implement, and improve security controls across endpoint, identity, cloud, and network environments.
• Review alerts and handle escalations in coordination with managed security partners.
• Participate in incident response activities including on-call rotation.
• Design and mature security processes and SOPs for scalability.
• Collaborate with IT and business units to integrate security into systems and workflows.
• Support compliance and audit activities with technical input and evidence.
• Evaluate new technologies for alignment with security standards.
• Contribute to security strategy by identifying gaps and driving initiatives.
• Generate reports on security posture and progress to leadership.

Job description

Description

This is a Cactus Wellhead position and is located in Houston, TX

Hybrid: 4 days in office; 1 day working from home

Job Details

Description

This is a Cactus Wellhead position and is located in Houston, TX

Hybrid: 4 days in office; 1 day working from home

JOB SUMMARY:

The Cybersecurity Engineer is responsible for executing and supporting key cybersecurity programs and initiatives across the organization. This role operates as a security generalist within a lean, high-impact team and is expected to independently drive efforts spanning vulnerability management, security engineering, incident response, and Zero-Trust identity and access management. This role requires the ability to manage multiple priorities and communicate effectively.

The ideal candidate is a proactive, accountable professional who can manage competing priorities, communicate effectively across technical and business teams, and take ambiguous problems through to resolution. This role emphasizes execution and continuous improvement of the organization’s security posture.

ESSENTIAL FUNCTIONS, ROLES, AND RESPONSIBILITIES:

• Practice safe work habits and comply with all quality, safety, health, environmental policies, procedures, programs, and regulations.
• Execute and support cybersecurity programs such as vulnerability management, data security initiatives, and identity-related improvements, as assigned by leadership.
• Lead remediation efforts for findings from vulnerability scans, penetration tests, and security assessments by coordinating with internal teams to ensure timely and effective resolution.
• Engineer, implement, and improve security controls and solutions across endpoint, identity, cloud, and network environments.
• Operate within a modern detection and response environment by reviewing alerts, making risk-based decisions, and handling escalations in coordination with managed security partners.
• Participate in incident response activities, including on-call rotation, investigation, playbook maintenance, containment, and recovery efforts.
• Design, document, and mature security processes and standard operating procedures to improve operational effectiveness and scalability.
• Collaborate with IT, application teams, and business units to integrate security into systems, workflows, and projects.
• Support compliance and audit activities in coordination with external partners by providing technical input, documentation, and evidence as required.
• Evaluate new and existing technologies to ensure alignment with security best practices and organizational standards.
• Contribute to security strategy by identifying gaps, recommending improvements, and driving execution of initiatives.
• Generate reports and communicate security posture, risks, and progress to leadership and stakeholders.

Education, Training, Experience

• Bachelor’s degree in Information Security/Systems, Computer Science, or other related technical discipline this role supports the organization’s move toward a Zero Trust model, with a focus on strong identity controls, least privilege access, and continuous verification. Create and maintain incident response playbooks.
• 5+ years of progressive experience in cybersecurity or security engineering roles

Certifications, Licenses, Registrations

• Security Foundations & Engineering: ISC2 SSCP or CISSP; CompTIA Security+
• Cloud Security: Microsoft Azure Security Engineer (AZ-500); AWS Certified Security – Specialty; Google Professional Cloud Security Engineer; ISC2 CCSP
• Identity & Access Management: Microsoft Identity and Access Administrator (SC-300); Okta Certified Professional
• Security Operations / Detection & Response: Microsoft Security Operations Analyst (SC-200); CompTIA CySA+

Job Knowledge, Skills, Abilities

• Experience working across multiple security domains such as endpoint security, identity and access management, vulnerability management, cloud security, and network security.
• Working knowledge of enterprise security technologies and concepts (e.g., XDR/EDR, SIEM, identity protocols such as SAML/OAuth/OpenID, vulnerability management).
• Foundational understanding of cloud security principles and applicable toolsets such as CNAPP, CSPM, and CASB.
• Familiarity with security frameworks such as NIST CSF, ISO 27001, SOC 2 or similar.
• Ability to manage multiple priorities and context switch effectively in a fast-paced environment.
• Strong problem-solving skills with the ability to take ownership of tasks and drive them to completion.
• Effective communication skills, including the ability to engage with both technical and non-technical stakeholders.
• Competency with automation and query languages such as PowerShell, Python, KQL, etc.
• Experience leading or contributing to security projects or initiatives.
• Demonstrated ability to communicate effectively in meetings and collaborate across teams in a professional environment.
• Self-motivated, accountable, and capable of working both independently and collaboratively.

SUPERVISORY RESPONSIBILITIES:

This role has no supervisory responsibilities.

Disclaimer: This job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities required of the employee for this position. Duties, responsibilities, and activities may change at any time with or without notice.

Cactus Companies is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, veteran status, genetic information, or any other characteristic protected by law.

Safety is our top priority. All employees must comply with our comprehensive safety programs, participate in required safety training, and demonstrate commitment to our safety-first culture. This position may require working in potentially hazardous environments if you are traveling to a branch or plant location. Ensure that you follow all safety guidelines that are required when working in the field, branch or manufacturing facility.