Senior Cyber Security Engineer Full Time NEW

Role Description Senior Cyber Security Engineer is a full-time, . This role is responsible for designing, implementing, and maintaining security controls to protect PICO ENERGY’s applications, networks, and information assets. Day-to-day tasks include monitoring security events, conducting threat and vulnerability assessments, responding to incidents, and coordinating remediation activities with IT and operational teams. The Senior Cyber Security Engineer will develop and refine security policies, standards, and procedures, and ensure alignment with industry best practices and regulatory requirements. The role also involves mentoring junior team members, collaborating with stakeholders on secure solution design, and supporting security audits and risk assessments.

Qualifications

• Strong expertise in Cybersecurity and Information Security, including policies, standards, and risk management practices.
• Proficiency in Network Security, such as firewalls, IDS/IPS, VPNs, segmentation, and secure network architecture.
• Hands-on experience in Application Security, including secure SDLC, code review, and use of security testing tools.
• Practical experience with Vulnerability Assessment, including scanning, prioritization, remediation planning, and reporting.
• Experience with security monitoring and incident response (SIEM tools, log analysis, threat detection, and response playbooks).
• Solid understanding of common security frameworks and standards .

Qualifications & Requirements

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field; advanced certifications (e.g., CISSP, CISM, CEH, OSCP) are a plus.
• Experience: 5 to 8 years of progressive experience in cyber security, with at least 3 years specifically focusing on OT/ICS security in the Oil & Gas or similar critical infrastructure sectors.
• Strong analytical and problem-solving skills, with the ability to work on-site in a cross-functional, fast-paced setting.
• Effective written and verbal communication skills, including the ability to present technical topics to non-technical stakeholders.