Cloud Security Engineer - IAM & CSPM

NRG Energy; Houston (TX); On-site; USD 110,000 - 140,000; Full time

Job summary

NRG Energy is seeking a Cyber Security Engineer to protect our systems, cloud workloads, and data across on‑prem and cloud environments. You will identify vulnerabilities, operate security tools, and guide engineering teams in secure configurations and governance.

The role emphasizes cloud posture management, IAM administration, vulnerability remediation, and incident response support, with emphasis on industry standards and best practices. Collaboration with cross‑functional teams is essential.

Qualifications

• Bachelor's degree in Cyber Security or Computer Science or equivalent experience.
• 2–5 years in cyber security with cloud exposure.
• Certifications such as Security+, CEH, CySA+ are a plus.

Responsibilities

• Identify misconfigurations and risks across cloud environments and drive remediation.
• Provide security guidance to cloud, infrastructure and development teams.
• Support secure cloud architecture reviews against standards and benchmarks.
• Administer IAM, SSO, MFA and directory services across on‑premises and cloud.
• Conduct vulnerability assessments across on‑premises, cloud, and container workloads.
• Assist in deploying and maintaining security tools (IDS/IPS, SIEM, WAF).
• Develop and enforce security policies and guardrails for cloud environments.
• Perform audits to ensure compliance with NIST CSF, PCI DSS, SOX.

Skills

Cloud security concepts

Vulnerability assessment

Incident response

Security guidance

Team collaboration

Education

Bachelor's degree in Cyber Security or Computer Science

Tools

Orca CSPM

Wiz

Prisma Cloud

Defender for Cloud

SIEM

WAF

Job description

NRG Energy is seeking a Cyber Security Engineer to protect our systems, cloud workloads, and data across on‑prem and cloud environments. You will identify vulnerabilities, operate security tools, and guide engineering teams in secure configurations and governance.

The role emphasizes cloud posture management, IAM administration, vulnerability remediation, and incident response support, with emphasis on industry standards and best practices. Collaboration with cross‑functional teams is essential.