Global IT Security Engineer: External & Cloud Risk

UGI Utilities, Inc.; Pennsylvania; Hybrid; USD 120,000 - 180,000; Full time

Job summary

UGI Utilities, Inc. is seeking a Global Cyber Security Engineer to lead external attack surface management and cloud security across the organization. You will drive ASM tooling, coordinate external pentesting, and oversee remediation with IT and business stakeholders.

The role also supports network security, OT/ICS security, and identity management, working with various teams to strengthen security posture and governance. Travel may be required within PA and surrounding areas.

Qualifications

• BS degree in CS/InfoSec or related field required.
• 4+ years of information security experience preferred.
• Certifications (e.g., CISSP, CISM, CEH) desirable.

Responsibilities

• Own external exposure management: ASM tooling and remediation tracking.
• Coordinate external penetration testing and red team capabilities.
• Improve cloud security posture across multiple environments.
• Contribute to cloud security standards and guardrails.
• Interpret PCI DSS, NIST, CIS Controls and advise on compliance.
• Manage vulnerability tooling, reporting, and remediation prioritization.
• Provide backup for network/OT/ICS security tasks and IAM platforms.
• Document security policies and support risk assessments.
• Communicate risks to technical and non-technical stakeholders.

Skills

Attack surface management

Penetration testing

Cloud security

Vulnerability management

Networking security architectures

Scripting: PowerShell/Python

SDLC security / DevSecOps

Education

Bachelor's degree in Computer Science or Information Security

Tools

InsightVM

Nexpose

Metasploit

Burp Suite

NMAP

Job description

UGI Utilities, Inc. is seeking a Global Cyber Security Engineer to lead external attack surface management and cloud security across the organization. You will drive ASM tooling, coordinate external pentesting, and oversee remediation with IT and business stakeholders.

The role also supports network security, OT/ICS security, and identity management, working with various teams to strengthen security posture and governance. Travel may be required within PA and surrounding areas.