Cybersecurity Engineer

NRG Energy; Houston (TX); On-site; USD 100,000 - 150,000; Full time

Job summary

NRG Energy is seeking a Cybersecurity Engineer to protect our cloud and on-premises systems, focusing on vulnerabilities, secure configurations, and incident response. You will collaborate with cloud, infrastructure, and development teams to safeguard data and operations.

Ideal candidates bring 2-5 years in cybersecurity with cloud experience, CSPM/CNAPP familiarity, and certifications. Experience with AWS and security services is preferred; container/serverless security is a plus.

Qualifications

• CSPM/CNAPP platform experience (Orca preferred; Wiz, Prisma Cloud, or Defender for Cloud also relevant).
• Experience with at least one major cloud provider (AWS preferred) and native security services (GuardDuty, Security Hub, IAM Identity Center, KMS, CloudTrail, WAF/Shield).
• Strong understanding of cloud security concepts including IAM, key management, network security, logging/monitoring, and shared responsibility models.
• Ability to interpret cloud misconfigurations, assess risk, and communicate remediation guidance clearly.
• Exposure to container/serverless security concepts (e.g., EKS, ECS, Lambda) is a plus.
• Cloud security certifications (AWS Security-Specialty, AWS Solutions Architect, Microsoft SC-200/AZ-500, CCSP) highly desired.
• Bachelor’s degree or equivalent experience; 2-5 years in cybersecurity or related roles with cloud exposure.
• Additional certifications such as Security+, CEH, CySA+ are desirable.
• Knowledge of security tools and best practices across enterprise and cloud environments.
• Strong understanding of networking and operating systems.
• Analytical and problem-solving skills; ability to work in a team and communicate technical concepts.

Responsibilities

• Maintain security measures for on-premises and cloud systems, including identifying vulnerabilities and risks.
• Provide security guidance to engineering teams and support incident response efforts.
• Remediate cloud misconfigurations by partnering with cloud and application owners.
• Assist in deploying, configuring, and maintaining security tools (IDS/IPS, SIEM, WAF).
• Develop and enforce security policies and cloud guardrails.
• Perform regular audits for security compliance with frameworks like NIST CSF, PCI DSS, SOX.

Skills

Cloud security concepts

IAM and access control

Vulnerability assessment

Team collaboration

Communication

Education

Bachelor's degree in Cyber Security, Computer Science, or related field

Tools

Orca

Wiz

Prisma Cloud

Defender for Cloud

NAC

IPS

Job description

Welcome to the intersection of energy and home services. At NRG, we're all about propelling the next generation of leaders forward. We are driven by our passion to create a smarter, cleaner and more connected future. We deliver innovative solutions that make our customers' lives easier-helping them power, protect, and intelligently manage their homes and businesses. To do this, we need creative and talented people to join our company.

We offer a dynamic work environment and a unified and inclusive culture. NRG fosters a strong sense of belonging that leads to better collaboration and business performance. Our company programs are designed to help employees develop the skills they need for success now and in the future. In everything we do, we aim to champion our employees and bring value to our customers, investors and society.

More information is available at www.nrg.com. Connect with NRG on Facebook, Instagram, LinkedIn and X.

Position Summary:

The Cybersecurity Engineer is responsible for maintaining security measures that protect the organization's systems, cloud workloads, and data. This role focuses on identifying vulnerabilities and risks, operating security tools across on-premises and cloud environments, providing security guidance to engineering teams, and supporting incident response efforts.

Key Responsibilities:

• Cloud posture across AWS (and/or Azure/GCP), identify misconfigurations and risks, and drive remediation by partnering with cloud and application owners.
• Provide security guidance and advisory support to cloud, infrastructure, and development teams on secure configuration, IAM, encryption, network segmentation, and logging.
• Support secure cloud architecture reviews and ensure alignment with the Framework (Security Pillar), CIS Benchmarks, and organizational cloud security standards.
• Understanding of Network protocols and network security Tools like NAC, IPS.
• Administer IAM platforms and integrations (e.g., SSO, MFA, directory services, conditional access) across on-premises and cloud environments.
• Conduct vulnerability assessments across on-premises, cloud, and container workloads to identify potential risks.
• Assist in the remediation of vulnerabilities by working closely with IT, cloud, and development teams.
• Assist in deploying, configuring, and maintaining security tools such as IDS/IPS, endpoint protection, SIEM, and WAF.
• Assist in the development, implementation, and enforcement of security policies and procedures, including cloud security standards and guardrails.
• Perform routine audits to ensure security compliance with organizational policies and regulatory requirements (e.g., NIST CSF, PCI DSS, SOX) across hybrid and cloud environments.
• Research and stay informed about current cybersecurity threats, vulnerabilities, cloud attack techniques, and best practices.
• Provide technical support and guidance to IT, cloud engineering, and development staff on security-related issues.

Qualifications:

• Hands-on experience operating a CSPM/CNAPP platform (Orca preferred; Wiz, Prisma Cloud, or Defender for Cloud also relevant).
• Working knowledge of at least one major cloud provider (AWS preferred), including native security services (e.g., GuardDuty, Security Hub, IAM Identity Center, KMS, CloudTrail, WAF/Shield).
• Strong understanding of cloud security conceptsincluding IAM, key management, network security (VPC, transit gateway, private endpoints), logging/monitoring, and shared responsibility models.
• Ability to interpret cloud misconfiguration findings, assess risk, and clearly communicate remediation guidance to cloud and application teams.
• Exposure to container and serverless security concepts (e.g., EKS, ECS, Lambda) is a plus.
• Cloud security certifications such as AWS Certified Security - Specialty, AWS Certified Solutions Architect, Microsoft SC-200/AZ-500, or CCSP are highly desired.
• Bachelor's degree in Cyber Security, Computer Science, or related field or equivalent relevant work experience.
• 2-5 years of experience in cyber security or related roles, including exposure to cloud environments.
• Additional certifications such as Security+, CEH, or CySA+ are desired.
• Knowledge of security tools, technologies, and best practices across enterprise and cloud environments.
• Strong understanding of networking and operating systems.
• Analytical and problem-solving skills with attention to detail.
• Ability to work collaboratively in a team environment and communicate technical concepts effectively.

NRG Energy is committed to a drug and alcohol-free workplace. To the extent permitted by law and any applicable collective bargaining agreement, employees are subject to periodic random drug testing, and post-accident and reasonable suspicion drug and alcohol testing. EOE AA M/F/Protected Veteran Status/Disability. Level, Title and/or Salary may be adjusted based on the applicant's experience or skills.

EEO is the Law Poster (The poster can be found at )

Official description on file with Talent.

We support the use of AI tools to help you prepare for your interview (e.g., practicing responses, researching the role, or refining your resume). However, during interviews and assessments, we expect responses to reflect your own thinking, experience, and communication. Use of AI to generate or read answers in real time, complete assessments, or misrepresent your qualifications is not permitted and may impact your candidacy.