Cloud Security Engineer — IAM & Incident Response

NRG Energy, Inc.; Houston (TX); On-site; USD 90,000 - 125,000; Full time

Job summary

NRG Energy, Inc. is seeking a Cyber Security Engineer to protect our systems, cloud workloads, and data across on‑prem and cloud. You will identify vulnerabilities, operate security tools, and provide guidance to engineering teams.

The role emphasizes incident response support, IAM administration, vulnerability assessments, and adherence to NIST/PCI/SOX standards across hybrid environments. Collaboration with IT and development teams is essential.

Qualifications

• Hands-on CSPM/CNAPP platform experience.
• Experience with at least one major cloud provider (AWS preferred).
• Knowledge of IAM, key management, network security, logging/monitoring, and shared responsibility models.
• Ability to interpret cloud misconfigurations and communicate remediation guidance.
• Exposure to container/serverless security concepts (EKS/ECS/Lambda) is a plus.
• Cloud security certifications are highly desired.
• Bachelor's degree or equivalent; 2–5 years in cybersecurity.

Responsibilities

• Identify cloud posture misconfigurations and drive remediation with cloud/app owners.
• Provide security guidance to cloud, infra, and dev teams on secure config, IAM, encryption, and logging.
• Support secure cloud architecture reviews and ensure alignment with security standards.
• Administer IAM across on‑premises and cloud environments.
• Conduct vulnerability assessments across on‑premises, cloud, and container workloads.
• Assist in deploying and maintaining security tools (IDS/IPS, SIEM, WAF).
• Perform audits for compliance (NIST CSF, PCI DSS, SOX) across hybrid and cloud environments.
• Stay informed on threats and best practices; provide guidance to IT and development staff.
• Collaborate effectively in a team environment.

Skills

Cloud security concepts

IAM management

Vulnerability assessment

Security tooling knowledge

Communication of remediation

Serverless/container security concepts

Networking knowledge

Analytical problem solving

Team collaboration

Education

Bachelor's degree in Cyber Security/Computer Science

Certifications: Security+, CEH, CySA+ (desirable)

Tools

Orca CSPM/CNAPP

Wiz

Prisma Cloud

Defender for Cloud

GuardDuty

Security Hub

IAM Identity Center

KMS

CloudTrail

WAF/Shield

IDS/IPS

SIEM

Job description

NRG Energy, Inc. is seeking a Cyber Security Engineer to protect our systems, cloud workloads, and data across on‑prem and cloud. You will identify vulnerabilities, operate security tools, and provide guidance to engineering teams.

The role emphasizes incident response support, IAM administration, vulnerability assessments, and adherence to NIST/PCI/SOX standards across hybrid environments. Collaboration with IT and development teams is essential.