CYBER SECURITY ENGINEER

Custom Truck One Source; Fort Worth (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

Custom Truck One Source is seeking a Cyber Security Engineer to own security architecture across on-premises, cloud, and network platforms. The role emphasizes designing, implementing, and hardening controls, including SIEM, EDR/XDR, vulnerability management, IAM/PAM, and cloud posture management.

You will lead security initiatives, mentor staff, and ensure compliance with PCI/SOX while collaborating with IT and audit teams in a dynamic, in-office Fort Worth environment.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• 5+ years of cybersecurity engineering experience.
• Relevant certifications preferred (CISSP, CISM, CEH, Security+, or cloud security cert).

Responsibilities

• Designs, builds, and owns security architecture across infrastructure, network, cloud, and applications.
• Leads security projects end to end—evaluating, selecting, and standing up new platforms and capabilities like SIEM, EDR/XDR, vulnerability management, IAM/PAM.
• Owns PCI/SOX compliance architecture and represents security in audits.
• Mentors Information Security Analysts and other IT staff on best practices.

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

CYBER SECURITY ENGINEER

Full Time Exempt [Salaried] Professional Fort Worth, TX, Fort Worth, TX, US

This position is an in-office role in our Ft. Worth location.

Summary

The Cyber Security Engineer is an owner of the security systems the business runs on. This role designs, integrates, and manages the security platforms and controls that protect the organization, and maintains a working knowledge of the infrastructure, network, and cloud environments those controls operate within - monitoring them for risk without owning their day-to-day administration. Escalations reach this role when issues are genuinely hard or touch the underlying security architecture itself. The Cyber Security Engineer's work is defined as much by projects and platforms as by tickets - standing up new security capabilities, hardening the environment by design, and making the technical decisions that Information Security Analysts and other IT staff build on.

Essential Duties and Responsibilities include the following. Other duties may be assigned.

• Designs, builds, and owns the security architecture across infrastructure, network, cloud, and applications, including segmentation, identity and access management, and zero-trust controls.
• Serves as the escalation point for security incidents and issues that are technically complex or require architectural changes, going beyond day-to-day monitoring and triage.
• Leads security projects end to end - evaluating, selecting, and standing up new platforms and capabilities such as SIEM, EDR/XDR, vulnerability management, IAM/PAM, and cloud security posture management tools.
• Designs the security hardening standards and baselines for servers, network devices, and cloud environments that other IT teams implement and maintain.
• Owns the architecture and controls needed to maintain PCI, SOX, and other compliance requirements, and represents security engineering in internal and external audits.
• Leads root cause analysis and technical remediation for significant security incidents, and drives architectural changes that prevent recurrence.
• Designs and continuously improves the vulnerability management program, including scanning strategy, risk-based prioritization, and remediation workflows.
• Architects security for cloud environments (AWS/Azure/GCP), including network design, identity, encryption, logging, and posture management.
• Builds automation and tooling (scripting, infrastructure as code) to reduce manual security work and improve detection and response times.
• Performs threat modeling and security risk assessments for new systems and projects prior to go-live.
• Provides technical mentorship and guidance to Information Security Analysts and other IT staff on security best practices and tooling.
• Evaluates security vendors and technologies, and owns technical vendor relationships for security tooling.
• Documents and maintains security architecture diagrams, standards, and runbooks in the organization's knowledge base.
• Stays current on emerging threats, security architecture patterns, and industry standards, and translates them into changes to the environment.
• Protects the organization's value by keeping information confidential.
• Accomplishes organizational goals by taking ownership of new and different initiatives and identifying opportunities to add value beyond assigned tasks.

Position Type/Expected Hours of Work

Work hours are typically 8 am to 5 pm; this may vary depending on project needs, on-call rotations, and incident response requirements.

• Security architecture and design
• Technical leadership and mentoring
• Project and platform ownership
• Sound judgment under ambiguity
• Strategic thinking
• Excellent verbal communications skills
• Able to work with minimum supervision
• Able to manage multiple concurrent projects
• Strong knowledge of security tooling and platforms
• Ethical Conduct
• Technical Capacity
• Organizational Skills
• Problem Solving/Analysis
• Thoroughness
• Abides by all laws, regulations, policies, work procedures and instructions
• Professional appearance
• Business casual
• Abides by all safety rules, and, if applicable, uses appropriate safety equipment in designated areas

Qualifications: To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Strong working knowledge of network, cloud, and infrastructure security architecture; ability to design solutions rather than just execute predefined procedures.
• Ability to lead technical projects from design through implementation.
• Strong work ethic and ability to work well with others.
• Highly organized, detail-oriented, delivering accurate and polished work.

Education and/or Experience

Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent combination of education and experience. Five or more years of experience in cybersecurity engineering, network/infrastructure security, or a related field, with demonstrated experience designing and owning security architecture. Relevant certifications preferred, such as CISSP, CISM, CEH, Security+, or a cloud security certification (AWS, Azure, or GCP).

Language Skills

Excellent listening and communication skills. Ability to explain complex technical and architectural decisions to both technical and non-technical audiences. Ability to read and interpret technical documentation and produce clear design and incident documentation.

Mathematical Skills

Good with basic math. Must possess the ability to make mathematical computations with accuracy. Ability to work with mathematical concepts such as probability and statistical inference, and fundamentals. Ability to apply concepts such as fractions, percentages, ratios, and proportions to risk analysis and reporting.

Reasoning Ability

Ability to design solutions for problems with no established procedure, and to make sound architectural decisions under ambiguity and time pressure. Ability to interpret a variety of instructions furnished in written, oral, diagram, or schedule form. Ability to coordinate several complex, technical projects simultaneously while working under pressure to meet deadlines. Ability to maintain a positive and flexible attitude and successfully operate under ambiguous guidelines. Ability to determine the proper course of action for escalated, high-severity security issues. Ability to create momentum and drive organizational change in security posture. Ability to solve practical problems involving a variety of concrete variables where only limited standardization exists.

Other Skills and Abilities

Hands-on experience with security tooling such as SIEM, EDR/XDR, vulnerability scanners, and IAM/PAM platforms. Scripting or automation experience (e.g., Python, PowerShell) is a plus. Excellent planning, organizational, and priority-setting skills. Well-developed interpersonal and communication skills. Professional appearance and manner, business casual. Ability to learn new tools and platforms quickly.

Physical Demands The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is regularly required to sit. The employee is frequently required to walk; use hands to finger, handle, or feel; reach with hands and arms; and talk or hear. The employee is occasionally required to stand. The employee must frequently lift and/or move up to 10 pounds and occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this job include close vision, distance vision, color vision, and ability to adjust focus.