Senior BISO Engineer (Cybersecurity)

Delan Associates, Inc; Houston (TX); On-site; USD 120,000 - 150,000; Full time

Job summary

Delan Associates, Inc. is seeking a BISO Engineer to bridge enterprise security strategy with day-to-day OT environments. You will partner with IT, OT and business units to identify risk, drive remediation, and translate security requirements into actionable programs.

The role requires hands-on experience with WAF, NGFW, SIEM, and vulnerability management, plus knowledge of NIST CSF and CMMC. You will contribute to change governance and cross-functional security initiatives across the

Qualifications

• 5+ years in cybersecurity engineering, architecture, or risk management.
• Hands-on experience with WAF, NGFW, SIEM, or vulnerability management platforms.
• Strong understanding of NIST CSF, CMMC, or equivalent frameworks.
• Proven ability to manage cross-functional security programs with minimal oversight.

Responsibilities

• Serve as the primary cybersecurity liaison for assigned business unit(s), translating enterprise security policies into unit-specific controls and procedures
• Conduct and support risk assessments, vulnerability management reviews, and security posture evaluations across applications, infrastructure, and OT environments
• Lead or support security initiatives including WAF/firewall configurations, identity & access management reviews, endpoint protection, and cloud security posture
• Represent the business unit in change management and security governance forums
• Coordinate with enterprise SIEM (Splunk), network security (Palo Alto/Panorama), and application security platforms (e.g., Imperva Cloud WAF) to ensure appropriate monitoring and enforcement
• Support M&A integration activities including network segmentation, firewall onboarding, and security baseline validation
• Develop and maintain security documentation: policies, runbooks, risk acceptance memos, and remediation plans
• Engage stakeholders across technical and leadership levels; present risk posture and program status to senior management.

Skills

Cybersecurity engineering

Risk management

Cross-functional cooperation

Governance

Tools

WAF

NGFW (Palo Alto)

SIEM (Splunk)

Vulnerability management

Job description

The BISO (Business Information Security Officer) Engineer serves as an embedded cybersecurity practitioner within a assigned business unit, bridging the gap between enterprise security strategy and day-to-day operational technology environments. This role partners closely with IT, OT, and business stakeholders to identify risk, drive remediation, and translate security requirements into actionable programs.

Key Responsibilities

• Serve as the primary cybersecurity liaison for assigned business unit(s), translating enterprise security policies into unit-specific controls and procedures
• Conduct and support risk assessments, vulnerability management reviews, and security posture evaluations across applications, infrastructure, and OT environments
• Lead or support security initiatives including WAF/firewall configurations, identity & access management reviews, endpoint protection, and cloud security posture
• Represent the business unit in change management and security governance forums
• Coordinate with enterprise SIEM (Splunk), network security (Palo Alto/Panorama), and application security platforms (e.g., Imperva Cloud WAF) to ensure appropriate monitoring and enforcement
• Support M&A integration activities including network segmentation, firewall onboarding, and security baseline validation
• Develop and maintain security documentation: policies, runbooks, risk acceptance memos, and remediation plans
• Engage stakeholders across technical and leadership levels; present risk posture and program status to senior management.

Required

• 5+ years in cybersecurity engineering, architecture, or risk management
• Hands-on experience with WAF, NGFW (Palo Alto preferred), SIEM, or vulnerability management platforms
• Strong understanding of NIST CSF, CMMC, or equivalent frameworks
• Proven ability to manage cross-functional security programs with minimal oversight

Preferred

• Experience in energy, utilities, or OT/ICS environments
• Familiarity with Imperva Cloud WAF, Illumio, Splunk, or Panorama
• CISSP, CISM, or equivalent certification
• Experience supporting M&A cybersecurity integration