{"id":2863520,"url":"https://alion.io/job/crescentenergyco-cyber-security-engineercloudsaas","title":"Cyber Security Engineer(Cloud/SaaS)","company":{"id":1919011,"name":"Crescentenergyco","domain":"crescentenergyco.com","url":"https://alion.io/company/crescentenergyco","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":5,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Houston, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":86000,"max_usd":164000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":460},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-08-28T00:00:00Z","employer_posted_date":"2026-08-28","last_verified_at":"2026-10-22T04:01:18Z","board_verified":true,"closed_at":null,"days_open":55,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":55},"description":"Crescent is a differentiated U.S. energy company committed to delivering value through a disciplined, returns-driven growth through acquisition strategy and consistent return of capital. Our long-life, balanced portfolio combines significant cash flow from stable production with a deep, high-quality development inventory. Crescent is a top three producer in the Eagle Ford basin and a scaled operator in each of the Permian and Uinta basins. Crescent’s leadership is an experienced team of investment, financial and industry professionals that combines proven investment and operating expertise. For more than a decade, Crescent and our predecessors have executed on a consistent strategy focused on cash flow, risk management and returns. Through disciplined and accretive investments, we have successfully tripled the size of our company since going public in December 2021 while maintaining a strong balance sheet.\nThe Cybersecurity Engineer (Cloud/SaaS) is responsible for securing and governing cloud platforms, SaaS applications, APIs, AI-driven automation, and enterprise technologies across the organization. This role is critical to protecting the company’s digital assets by strengthening controls around SaaS integrations, machine-driven workflows, centralized logging, and cloud telemetry, while improving the organization’s ability to detect, investigate, and respond to cyber threats across the enterprise.\nThis position will lead and support the design, implementation, and continuous improvement of cloud and SaaS security controls, centralized logging capabilities, telemetry integrations, detection engineering, and incident response support processes. The ideal candidate brings hands-on experience with cloud and SaaS security, SIEM and SOC integrations, logging architecture, and security monitoring, along with the ability to partner across cybersecurity, infrastructure, applications, data, and business teams to improve enterprise resilience. This role will also help define and implement security best practices for agentic AI solutions, automation pipelines, and non-human workflows to ensure these technologies are deployed with appropriate guardrails, visibility, and governance. This individual will play an important role in advancing the company’s cybersecurity posture and supporting its journey toward becoming a secure, technology-enabled, and operationally resilient enterprise.\nKey Responsibilities:\nCloud & SaaS Security\nSecure and govern AI-driven automation, agentic workflows, SaaS platforms, and cloud-connected business processes across the enterprise.\nProtect SaaS integrations, APIs, automation pipelines, service-to-service connections, and cloud-connected operational workflows from misuse, misconfiguration, excessive privilege, and unauthorized access.\nPartner with application, infrastructure, and data teams to ensure cloud and SaaS platforms are deployed with appropriate security controls, monitoring, and governance across the enterprise.\nSupport the development and enforcement of security standards for cloud services, SaaS applications, machine identities, and AI-enabled workflows.\nCentralized Logging, Visibility & Telemetry Enablement\nEnable, maintain, and continuously improve centralized logging across cloud platforms, SaaS applications, enterprise services, and security tooling.\nEnsure log integrity, retention, security, and availability are maintained in line with enterprise policy, compliance requirements, and operational needs.\nValidate logging coverage across critical cloud, SaaS, and enterprise systems and identify gaps that may reduce detection or investigative effectiveness.\nCollaborate with platform and infrastructure teams to onboard new systems and services into centralized logging pipelines.\nSIEM, Detection Engineering & SOC Integration\nIntegrate cloud and SaaS telemetry with managed SOC providers, SIEM platforms, and approved security monitoring solutions.\nTune detection rules, monitoring logic, and alerting thresholds to improve visibility into SaaS activity, suspicious access behavior, API misuse, AI usage patterns, and anomalous activity across the enterprise.\nSupport SOC operations through alert triage, investigation, escalation, and response coordination.\nWork with internal cybersecurity stakeholders and external monitoring partners to improve alert fidelity, reduce false positives, and strengthen response effectiveness.\nSecurity Monitoring, Investigation & Response\nMonitor cloud and SaaS environments to identify anomalous behavior, suspicious activity, policy violations, and indicators of compromise.\nSupport detection, investigation, and response efforts involving SaaS applications, APIs, cloud platforms, automation pipelines, and non-human identities.\nAssist in incident response activities by gathering evidence, validating event scope, supporting containment actions, and coordinating with technical teams on remediation.\nPartner with infrastructure and application teams during investigations involving cloud-connected systems and remote access pathways.\nDocument findings, lessons learned, and recommended control improvements following investigations or security events.\nContinuous Improvement & Operational Cyber Resilience\nContinuously enhance automation, detection, and response capabilities across the enterprise through process improvement, tooling optimization, and workflow standardization.\nIdentify opportunities to automate repetitive security tasks, improve telemetry quality, and increase visibility without disrupting business operations, production support, or operational uptime.\nSupport roadmap initiatives related to SaaS security, cloud monitoring, detection maturity, and AI governance.\nContribute to the development of standards, procedures, and repeatable controls that improve long-term cyber resilience across the enterprise.\nQualifications & Experience:\nEducation:\nBachelor’s degree in Information Security, Computer Science, Information Technology, Engineering, or a related field preferred.\nEquivalent practical experience will be considered.\nRelevant certifications such as CCSP, CISSP, GIAC, Azure/AWS security certifications, or other cloud and security operations certifications are a strong plus.\nExperience:\n4+ years of experience in cybersecurity, cloud security, SaaS security, security operations, or related security engineering roles.\nHands-on experience securing SaaS platforms, APIs, integrations, and cloud-connected workflows in enterprise environments.\nExperience with centralized logging, SIEM integration, security monitoring, and detection engineering.\nExperience supporting SOC operations, alert investigation, and incident response processes.\nFamiliarity with AI-driven automation, agentic workflows, service accounts, and machine identities is strongly preferred.\nExperience supporting control validation, security policy enforcement, and audit activities in regulated environments is preferred.\nUpstream oil and gas experience is strongly preferred.\nSkills & Competencies:\nStrong understanding of cloud security, SaaS security, API security, logging architecture, and telemetry management.\nAbility to secure and govern AI-driven automation, agentic workflows, and machine-based activity in enterprise environments.\nWorking knowledge of SIEM platforms, managed SOC operating models, alert tuning, and incident response support practices.\nStrong analytical and troubleshooting skills with the ability to investigate anomalous behavior and improve detection effectiveness.\nAbility to balance security rigor with operational practicality in a fast-paced enterprise environment.\nStrong collaboration skills with the ability to work across cybersecurity, infrastructure, applications, data, and business teams.\nClear communication skills with the ability to explain risks, findings, and technical issues to both technical and non-technical stakeholders.\nCrescent Energy is an equal opportunity employer. All qualified applicants will be considered for employment without regard to race, color, religion, gender/pregnancy, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status or any other legally protected status. Crescent Energy is also committed to compliance with all fair employment practices regarding citizenship and immigration status. If you require accommodation to complete the application process, please let us know by contacting .","description_format":"text","description_chars":8491,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Software","Security Operations"],"lifecycle":[{"event":"open","at":"2026-10-19T16:58:31Z"}],"visa":[],"liveness":{"score":28,"band":"fade","label":"Fading","p_open":1,"p_active":0.618,"p_room":0.45,"age_days":54,"expected_fill_days":30,"reasons":["conf:2","win:tail"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/crescentenergyco-cyber-security-engineercloudsaas","json_url":"https://alion.io/job/crescentenergyco-cyber-security-engineercloudsaas.json","meta":{"generated_at":"2026-10-22T04:23:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4695,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1919011},"rest":"https://alion.io/mcp/rest/get_company?id=1919011"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcrescentenergyco-cyber-security-engineercloudsaas"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcrescentenergyco-cyber-security-engineercloudsaas"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcrescentenergyco-cyber-security-engineercloudsaas"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/crescentenergyco-cyber-security-engineercloudsaas\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcrescentenergyco-cyber-security-engineercloudsaas"}]}