Cybersecurity Engineer - Enterprise Security & Audit Readiness

State of Texas; Town of Texas (WI); On-site; USD 90,000 - 150,000; Full time

Job summary

Office of the Attorney General is seeking a Cybersecurity Engineer to design, implement, and operate enterprise security platforms and produce audit-ready artifacts aligned with state and federal requirements.

Responsibilities include engineering security controls, conducting risk assessments, onboarding telemetry, and ensuring regulated data (e.g., FTI, CJI, PHI) is protected. Collaboration with cloud, network, and application teams is essential.

Qualifications

• Eight years of full-time information security experience.
• Deep production ownership of three or more primary platforms.
• Experience across public cloud, firewalls, IAM, and at least one SIEM language.
• Ability to map platforms to SP 800-53 and produce audit-ready artifacts.
• Fluency in Zero Trust and CSF 2.0; TX frameworks and TX-RAMP.
• Certifications such as Security+, CISSP/CCSP/SABSA/TOGAF; GIAC; Splunk Architect; AWS/Azure certifications.

Responsibilities

• Engineering and tuning security controls; onboarding telemetry, and regulated data protection.
• Perform risk assessments and support exposure management; produce audit-ready evidence.
• Lead and guide others; contribute to enterprise security standards, reference architectures, and control documentation.
• Collaborate with operations, cloud, network, and application teams to secure platforms.

Skills

Cloud security

SIEM queries

Zero Trust

Python/PowerShell

AWS/Azure

Windows Server

Git

Networking fundamentals

Regulated data handling

Education

HS diploma or equivalent

College credit substitution

Tools

Splunk

Tenable

AWS

Azure

Job description

Office of the Attorney General is seeking a Cybersecurity Engineer to design, implement, and operate enterprise security platforms and produce audit-ready artifacts aligned with state and federal requirements.

Responsibilities include engineering security controls, conducting risk assessments, onboarding telemetry, and ensuring regulated data (e.g., FTI, CJI, PHI) is protected. Collaboration with cloud, network, and application teams is essential.