Information Security Engineer

About Us:

By combining a rich legacy in the power and gas compression space with pioneering technology, INNIO brings our customers affordable, reliable, and sustainable energy solutions for today—and tomorrow. We are helping to meet today’s energy needs with 64 GW of installed capacity and 48,000 of our powerful Jenbacher and Waukesha engines, which can be found in more than 100 countries. And, by harnessing our history of energy industry firsts along with the power of digital innovation, we will continue to deliver for the future. Welcome to a World of Innovation and Inspiration! Welcome to INNIO!

Work Structure:

- The Information Security Engineer will be based at our Houston, TX office in a hybrid capacity, with a combination of onsite & remote workdays.

- Occasional travel to data centers or branch offices as needed in the US, Canada and/or Mexico.

Position Responsibilities:

- The Information Security Engineer will focus on incident response & automation including coordinating day‑to‑day incident handling with internal teams and SOC Provider: triage, scoping, containment, recovery, and documentation.

- Maintain and improve response playbooks, runbooks, enrichment pipelines, and case workflows; ensure consistency and auditability.

- Prioritize and deliver automation for high‑volume tasks (enrichment, correlation, evidence collection, notifications, containment actions).

- Tune alerts and data pipelines to improve signal‑to‑noise and reduce manual touches; track and report on detection/response quality metrics.

- Translate incident lessons into preventive controls and configuration changes (identity, endpoint, AD, cloud) in partnership with platform owners.

- Keep risk records and asset mappings up‑to‑date; link incidents to risks, treatments, and control improvements.

- Prepare audit evidence and contribute to policy/procedure updates to sustain ISMS compliance.

- Mentor analysts on triage methods, documentation quality, and safe automation practices; participate in tabletop exercises.

Minimum Requirements:

- 4+ years in incident response or security engineering with measurable improvements to detection/response and workflow automation.

- Proficiency with enterprise security tooling (e.g., EDR/MDR, log analytics/SIEM, identity/AD, M365 security) and case management platforms.

- Scripting/query ability for automation and investigations (e.g., Python, PowerShell, KQL/SPL/SQL‑like).

- Experience operating within an ISMS and supporting ISO 27001/27005 processes and audits.

- Strong cross‑functional communication and documentation skills.

Preferred Skills:

- Designing automation backlogs and value tracking (time saved, error reduction, MTTR impact).

- Exposure to risk tooling (ServiceNow IRM or similar) and control mapping (e.g., MITRE ATT&CK).

- Hardened identity/endpoint/AD change implementations and validation via purple‑team/attack simulation.

- Certifications such as GCFA, GCIA, GCIH, Azure Security Engineer, Microsoft Security Operations Analyst, or equivalent.