Lead IT Network Security Engineer

CenterPoint Energy seeks a Lead IT Network Security Engineer in Houston, TX (onsite) to lead security controls across enterprise networks and internet-facing applications.

Responsibilities

• Provide technical leadership and subject-matter expertise for network security and web application security across CNP environments
• Design, implement, maintain, and troubleshoot security controls for network infrastructure, applications, and internet-facing services
• Develop and maintain security policies for firewalls, WAF, threat prevention, URL filtering, remote access, and application security
• Help protect web applications from application-layer threats, automated attacks, malicious bots, and abuse
• Manage and support enterprise security technologies where applicable, including Next Gen firewalls, Prisma Client VPNs, and Web Application Firewall (WAF)
• Analyze security events, alerts, and traffic patterns to identify threats, vulnerabilities, policy issues, and control improvement opportunities
• Lead troubleshooting and resolution of complex network and application security incidents and service-impacting issues
• Partner with Security Architecture, Network Engineering, DevOps, application teams, and infrastructure teams to deliver secure solutions
• Review infrastructure and application changes for alignment with cybersecurity policies, architecture, and standards
• Maintain security configurations, standards, procedures, diagrams, and operational documentation
• Provide technical guidance and mentorship to engineers; act as escalation support for complex security issues
• Support change management, incident response, vulnerability remediation, lifecycle management, and continuous security improvement
• Monitor platform health and maintain KPI reporting on coverage, rule effectiveness, and incident trends
• Implement automation scripting to improve firewall and WAF Operations and Services
• Maintain platform documentation, change records, and configuration baselines
• Serve as the subject matter expert for firewall best practices, policies, and regulatory requirements
• Support internal and external audits, including audit-facing assistance
• Interface with technical vendors on security issues and recommend solutions
• Develop firewall security standards and firewall security architecture designs
• Author technical documentation and perform infrastructure and web application vulnerability assessments

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field
• Minimum 5 years experience in Cybersecurity or IT
• Hands-on experience with Next Gen Firewalls and Web Application Firewalls
• Hands-on experience with network, OS, and application security
• Experience tuning WAF rulesets, managing false positives, and maintaining policy hygiene
• Experience with Azure and GCP cloud apps and services
• Experience with Zero Trust, SASE, network segmentation, DLP, and cloud security architectures
• Experience supporting highly available, business-critical, or customer-facing applications and network security services
• Experience collaborating cross-functionally with DevOps, IT, and Network Security teams
• Familiarity with change management processes and maintaining configuration documentation
• Experience implementing Zero Trust or similar modern security models
• Strong analytical skills, attention to detail, knowledge of networking protocols, and cybersecurity frameworks
• Understanding of how all aspects of IT impact security of network environments
• CISSP or other relevant security certifications (Next Gen Firewall, Web Application Firewall, Cloud Security) highly preferred
• Knowledge of SOX, HIPAA, and NERC regulations preferred

Technologies

• Next Gen firewalls
• Prisma Client VPNs
• Web Application Firewall (WAF)
• WAF rulesets
• Azure
• GCP
• Zero Trust
• SASE
• Network segmentation
• DLP
• Firewall
• URL filtering
• Automation scripting

Benefits

• Competitive pay
• Paid training
• Benefits eligibility begins on your first day
• Transit subsidies
• Flexible work schedule, paid holidays, and paid time off
• Access to discounts at fitness clubs and an on-site wellness center at headquarters in Houston
• Professional growth and development programs including tuition reimbursement
• 401(k) Savings Plan with a company match dollar-for-dollar up to 6% and a company contribution of 3% regardless of contribution

Job Details

• Job type: Full Time
• Location: Houston, TX, US (onsite)
• Posting start date: 11/02/2026
• Posting end date: 11/20/2026
• Nearest major market: Houston