Lead IT Network Security Engineer

CenterPoint Energy and its predecessor companies have been in business for more than 150 years.

Our Vision: Our vision is to become the most admired utility in the United States through the execution of our long-term growth strategy. We have an unwavering commitment to safely and reliably deliver electricity and natural gas to millions of people.

Our Commitment: CenterPoint Energy is committed to creating an inclusive work environment where business results are achieved through the skills, abilities and talents of our diverse workforce.

At CenterPoint Energy, individuals are respected for their contributions toward our company objectives. We strive for an inclusive work environment across all levels that is reflective of the available workforce in the communities we serve.

Job Summary

We are seeking an experienced Network Security Engineer to provide technical and team leadership and help strengthen the security of CNP’s network infrastructure and web applications. This role will be responsible for designing, implementing, and supporting security controls that protect the organization from cyber threats, application attacks, and bot abuse.

The engineer will provide expertise across evolving network and web application security technologies, develop and troubleshoot security policies, and help ensure solutions align with organizational security standards and requirements. The position requires close collaboration with Network, Security Architecture, DevOps, and other technology teams to translate requirements into secure, supportable solutions.

Essential Functions

Provide technical leadership and subject-matter expertise for network security and web application security across CNP environments.

Design, implement, maintain, and troubleshoot security controls protecting network infrastructure, applications, and internet-facing services.

Develop and maintain firewall, WAF, threat prevention, URL filtering, remote access, and application security policies.

Protect web applications from common application-layer threats, automated attacks, malicious bots, and abuse.

Manage and support enterprise security technologies such as Next Gen firewalls, Prisma Client VPNs, and Web Application Firewall (WAF), where applicable to the role.

Analyze security events, alerts, and traffic patterns to identify threats, vulnerabilities, policy issues, and opportunities to strengthen controls.

Lead troubleshooting and resolution of complex network and application security incidents and service-impacting issues.

Partner with Security Architecture, Network Engineering, DevOps, application teams, and infrastructure teams to design and implement secure solutions.

Review proposed infrastructure and application changes to ensure alignment with established cybersecurity policies, architecture, and standards.

Maintain security configurations, standards, procedures, diagrams, and operational documentation.

Provide technical guidance and mentorship to other engineers and serve as an escalation point for complex security issues.

Essential Functions Cont'd

Support change management, incident response, vulnerability remediation, lifecycle management, and continuous security improvement initiatives.

Monitor platform health and maintain KPI reporting on coverage, rule effectiveness, and incident trends.

Implement automation scripting to improve firewall and web application firewall Operations and Services

Maintain platform documentation, change records, and configuration baselines.

Serves as the subject matter expert for firewall best practices, policies, and regulatory requirements.

Provides support and assistance during internal and external audits.

Interfaces with technical vendors regarding security issues and recommend solutions.

Develop firewall security standards.

Develop firewall security architecture designs.

Ability to author technical documentation. Performs infrastructure and web application vulnerability assessments.

Education Description

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field.

Experience

A Minimum of 5 years experience in Cybersecurity or IT

Hands-on experience with Next Gen Firewalls and Web Application Firewalls.

Hands-on experience with network, OS, and application security

Experience tuning WAF rulesets, managing false positives, and maintaining policy hygiene.

Experience with Azure and GCP cloud apps and services

Experience with Zero Trust, SASE, network segmentation, DLP, and cloud security architectures.

Experience supporting highly available, business-critical, or customer-facing applications and network security services

Experience collaborating cross-functionally with DevOps, IT, and Network Security teams.

Familiarity with change management processes and maintaining configuration documentation.

Experience implementing Zero Trust or similar modern security models.

Strong analytical skills, attention to detail, and knowledge of networking protocols and cybersecurity frameworks.

Understanding of all aspects of Information Technology and its impact on the security of network environments.

CISSP or other relevant security certifications (Next Gen Firewall, Web Application Firewall, Cloud Security) highly preferred

Knowledge of SOX, HIPAA and NERC regulations preferred

Physical Requirements

Working Conditions

We want you to know Being a part of the CenterPoint Energy team is more than a career alone. It's an opportunity to make a positive impact. You will be an integral part of enabling everyday life and the pursuit of possibilities for the customers we serve and the communities we share. The vital services we provide are at the core of making our world work, and by sharing your energy with us, we'll create a better tomorrow together.

What we bring to you

Competitive pay

Paid training

Benefits eligibility begins on your first day

Transit subsidies

Flexible work schedule, paid holidays and paid time off

Access to discounts at fitness clubs and an on-site wellness center at our headquarters in Houston

Professional growth and development programs including tuition reimbursement

401(k) Savings Plan featuring a company match dollar-for-dollar up to 6% and a company contribution of 3% regardless of your contribution

Job Type: Full Time Posting Start Date: 11/02/2026​ Posting End Date: 11/20/2026

This contractor and subcontractor shall abide by the requirements of 41 CFR §§ 60-1.4(a), 60-300.5(a), and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, or national origin. Moreover, these regulations require that covered prime contractors and subcontractors take affirmative action to employ and advance in employment individuals without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status or disability.

#LI-CNP