Senior BISO Engineer (Cybersecurity)

Delan Associates, Inc; Houston (TX); Presencial; USD 120 000 - 180 000; Tempo integral

Resumo da oferta

Delan Associates, Inc in Houston, TX seeks a BISO Engineer to act as an embedded cybersecurity practitioner within a business unit, translating security strategy into practical controls and programs. You will partner with IT, OT, and business stakeholders to identify risk, drive remediation, and communicate risk posture and progress to senior management.

The role requires collaboration across enterprise security, incident response, and governance forums, and demands hands-on experience with

Qualificações

• 5+ years in cybersecurity engineering, architecture, or risk management.
• Hands-on experience with WAF, NGFW (Palo Alto preferred), SIEM, or vulnerability management platforms.
• Strong understanding of NIST CSF, CMMC, or equivalent frameworks.
• Proven ability to manage cross-functional security programs with minimal oversight.

Responsabilidades

• Serve as the primary cybersecurity liaison for assigned business unit(s), translating enterprise security policies into unit-specific controls and procedures.
• Conduct and support risk assessments, vulnerability management reviews, and security posture evaluations across applications, infrastructure, and OT environments.
• Lead or support security initiatives including WAF/firewall configurations, identity & access management reviews, endpoint protection, and cloud security posture.
• Represent the business unit in change management and security governance forums.
• Coordinate with enterprise SIEM (Splunk), network security (Palo Alto/Panorama), and application security platforms (e.g., Imperva Cloud WAF) to ensure appropriate monitoring and enforcement.
• Support M&A integration activities including network segmentation, firewall onboarding, and security baseline validation.
• Develop and maintain security documentation: policies, runbooks, risk acceptance memos, and remediation plans.
• Engage stakeholders across technical and leadership levels; present risk posture and program status to senior management.

Conhecimentos

Cybersecurity engineering

Risk management

NIST CSF/CMMC knowledge

Cross-functional collaboration

Stakeholder communication

Ferramentas

WAF

Palo Alto NGFW

SIEM

Vulnerability management

Descrição da oferta de emprego

The BISO (Business Information Security Officer) Engineer serves as an embedded cybersecurity practitioner within a assigned business unit, bridging the gap between enterprise security strategy and day-to-day operational technology environments. This role partners closely with IT, OT, and business stakeholders to identify risk, drive remediation, and translate security requirements into actionable programs.

Key Responsibilities

• Serve as the primary cybersecurity liaison for assigned business unit(s), translating enterprise security policies into unit-specific controls and procedures
• Conduct and support risk assessments, vulnerability management reviews, and security posture evaluations across applications, infrastructure, and OT environments
• Lead or support security initiatives including WAF/firewall configurations, identity & access management reviews, endpoint protection, and cloud security posture
• Represent the business unit in change management and security governance forums
• Coordinate with enterprise SIEM (Splunk), network security (Palo Alto/Panorama), and application security platforms (e.g., Imperva Cloud WAF) to ensure appropriate monitoring and enforcement
• Support M&A integration activities including network segmentation, firewall onboarding, and security baseline validation
• Develop and maintain security documentation: policies, runbooks, risk acceptance memos, and remediation plans
• Engage stakeholders across technical and leadership levels; present risk posture and program status to senior management.

Required

• 5+ years in cybersecurity engineering, architecture, or risk management
• Hands-on experience with WAF, NGFW (Palo Alto preferred), SIEM, or vulnerability management platforms
• Strong understanding of NIST CSF, CMMC, or equivalent frameworks
• Proven ability to manage cross-functional security programs with minimal oversight

Preferred

• Experience in energy, utilities, or OT/ICS environments
• Familiarity with Imperva Cloud WAF, Illumio, Splunk, or Panorama
• CISSP, CISM, or equivalent certification
• Experience supporting M&A cybersecurity integration