Cloud Security Engineer: Secure Cloud, IAM & Compliance

NRG Energy; Houston (TX); On-site; USD 100,000 - 150,000; Full time

Job summary

NRG Energy is seeking a Cybersecurity Engineer to protect our cloud and on-premises systems, focusing on vulnerabilities, secure configurations, and incident response. You will collaborate with cloud, infrastructure, and development teams to safeguard data and operations.

Ideal candidates bring 2-5 years in cybersecurity with cloud experience, CSPM/CNAPP familiarity, and certifications. Experience with AWS and security services is preferred; container/serverless security is a plus.

Qualifications

• CSPM/CNAPP platform experience (Orca preferred; Wiz, Prisma Cloud, or Defender for Cloud also relevant).
• Experience with at least one major cloud provider (AWS preferred) and native security services (GuardDuty, Security Hub, IAM Identity Center, KMS, CloudTrail, WAF/Shield).
• Strong understanding of cloud security concepts including IAM, key management, network security, logging/monitoring, and shared responsibility models.
• Ability to interpret cloud misconfigurations, assess risk, and communicate remediation guidance clearly.
• Exposure to container/serverless security concepts (e.g., EKS, ECS, Lambda) is a plus.
• Cloud security certifications (AWS Security-Specialty, AWS Solutions Architect, Microsoft SC-200/AZ-500, CCSP) highly desired.
• Bachelor’s degree or equivalent experience; 2-5 years in cybersecurity or related roles with cloud exposure.
• Additional certifications such as Security+, CEH, CySA+ are desirable.
• Knowledge of security tools and best practices across enterprise and cloud environments.
• Strong understanding of networking and operating systems.
• Analytical and problem-solving skills; ability to work in a team and communicate technical concepts.

Responsibilities

• Maintain security measures for on-premises and cloud systems, including identifying vulnerabilities and risks.
• Provide security guidance to engineering teams and support incident response efforts.
• Remediate cloud misconfigurations by partnering with cloud and application owners.
• Assist in deploying, configuring, and maintaining security tools (IDS/IPS, SIEM, WAF).
• Develop and enforce security policies and cloud guardrails.
• Perform regular audits for security compliance with frameworks like NIST CSF, PCI DSS, SOX.

Skills

Cloud security concepts

IAM and access control

Vulnerability assessment

Team collaboration

Communication

Education

Bachelor's degree in Cyber Security, Computer Science, or related field

Tools

Orca

Wiz

Prisma Cloud

Defender for Cloud

NAC

IPS

Job description

NRG Energy is seeking a Cybersecurity Engineer to protect our cloud and on-premises systems, focusing on vulnerabilities, secure configurations, and incident response. You will collaborate with cloud, infrastructure, and development teams to safeguard data and operations.

Ideal candidates bring 2-5 years in cybersecurity with cloud experience, CSPM/CNAPP familiarity, and certifications. Experience with AWS and security services is preferred; container/serverless security is a plus.