Cloud CyberSecurity Engineer - Hybrid (Houston or Dallas TX) at AECOM
Houston, TX
—
Jul 6, 2026
Houston, TX
Jul 21, 2026
What this job asks for AI summary
A cloud security engineering role focused on governance and risk management across AWS and Azure environments, using CSPM tools such as Prisma Cloud and Qualys TotalCloud to identify misconfigurations and drive remediation. The position owns cloud security posture reporting, defines control requirements in line with frameworks like NIST and CIS, and coordinates with infrastructure and application teams rather than performing hands-on implementation. A secondary responsibility covers backup support for email security operations via Proofpoint.
Senior level · 6+ years · Dallas-Fort Worth-Arlington, TX · Full-time
“or” means any one of them counts — you don't need all of them.
Posted 2 times — it's one opening, so apply once.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 130 people in the Dallas-Fort Worth-Arlington, TX area plausibly meet what this posting asks for (information security analysts). range 55–190
Applicant volume Moderate — A normal amount of company. The rare requirements below are what will separate a shortlisted application from the rest.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $136,548 (middle half $105,715–$165,838).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (8)
The role is hybrid (not fully remote), based in Dallas or Houston, TX. The CBSA is set to Dallas-Fort Worth-Arlington as the first-named location; Houston (CBSA 26420) is an equally valid base.
The minimum requirement is a Bachelor's degree OR demonstrated equivalency of experience/education, so no hard degree gate is set.
Prisma Cloud and Qualys TotalCloud are both named in the required section as the primary CSPM tools; CrowdStrike Cloud Security is also listed as an acceptable alternative in that same requirement.
Infrastructure-as-Code familiarity (Terraform listed as representative) appears only under Preferred Qualifications; Terraform is used here as the canonical representative tool.
NIST, CIS, and ISO 27001 are listed under Preferred Qualifications as framework familiarity, not a hard gate.
Cloud security certifications (AWS, Azure) are listed as 'highly preferred' under Preferred Qualifications — not a hard requirement.
Proofpoint email security is explicitly framed as a secondary/backup responsibility and appears under Preferred Qualifications, so it is marked preferred.
No compensation range is disclosed in the posting.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.