Cybersecurity Engineer – Hybrid OT/ICS & GRC

ERock; Houston (TX); Hybrid; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) with company match

Paid time off

Hybrid work schedule

Job summary

ERock is seeking a Cybersecurity Engineer to secure our systems and data through hands-on engineering and GRC practices. You will apply risk management, vulnerability management, and industry frameworks to protect confidentiality, integrity, and availability.

The role operates with independence, translating compliance into practical security controls while driving continuous improvement across security operations. Reports to Sr. Cybersecurity Manager in a hybrid work model.

Qualifications

• Bachelor's degree or equivalent in CS/IS or related field; 4+ years in cyber security.
• Certifications or training in risk management and IT controls (NIST 800-39/30/53 or CSF) are preferred.
• Ability to translate governance requirements into practical security controls.

Responsibilities

• Design, implement, and secure enterprise-grade security controls and architectures.
• Lead or support incident response; coordinate containment and remediation.
• Perform risk assessments, vulnerability management, and threat intelligence integration.
• Develop and maintain playbooks, runbooks, and tabletop exercises.
• Collaborate with IT and business teams to embed security in systems and operations.

Skills

TCP/IP understanding

Networking knowledge

Log analysis

Vulnerability management

EDR/MDR

SIEM

IDS/IPS

Endpoint forensics

Security architecture

Security monitoring at scale

Technical leadership

Mentoring

Strong communication

Education

Bachelor's degree in CS/IS or equivalent

4+ years cybersecurity experience

Cybersecurity certifications (Security+, SSCP, GSEC, CRISC) or equivalent

Tools

EDR/MDR

SIEM

IDS/IPS

Endpoint forensics tools

Job description

ERock is seeking a Cybersecurity Engineer to secure our systems and data through hands-on engineering and GRC practices. You will apply risk management, vulnerability management, and industry frameworks to protect confidentiality, integrity, and availability.

The role operates with independence, translating compliance into practical security controls while driving continuous improvement across security operations. Reports to Sr. Cybersecurity Manager in a hybrid work model.