Staff Development Security Operations Engineer

If you have what it takes to become part of the Vistra family and would like to start a promising career with a global leader, take a look at the exciting employment opportunities that are currently available and apply online.

As a member of the Vistra Cyber Security Team, the DevSecOps Engineer will work with agile teams to ensure security is considered throughout development through the implementation of automated guardrails and security test. They will assist in design and drive development of security testing and validation into automated tools and pipelines. They will serve as the technical liaison between the Enterprise Architect teams and the Engineering teams. Individuals within this role will specialize in the security disciplines related to automation of security controls, and ideally would have experience or expertise in DevOps.

Key Accountabilities

- Provides technical support to integrate security and compliance requirements into all enterprise technology systems and projects as part of the SDLC process by working closely with various other company architects and application teams.

- Creates and maintains documentation related to security processes, procedures and infrastructure.

- Assesses current applications and architecture to determine methods for automating security testing and control validation.

- Executes plans for implementing management directives in most secure manners with automation.

- Provides security guidance and requirements to various technology teams on methods for driving security into every aspect of the established SDLC.

- Works closely with cross-functional teams as a subject matter expert for security standards and advises/contributes to development as needed.

Education, Experience, & Skill Requirements

- BS or BA degree in business or information systems related fields, with an emphasis in information technology or cyber security

- 3 - 7 years of dedicated information security experience OR 5 - 7 years of information technology administration experience

- Experience designing/implementing security controls in AWS and/or Azure

- Experience with automating processes and/or security controls

- Familiarity with DevOps, DevSecOps, and Agile SDLC methodologies

- Proven knowledge of security concepts (CISSP, CISA, CISM, GPEN, GWAPT, GCIH, other GIAC certifications, OSCP, CEH, PCNSE, etc.) .

- Experience operating in a DevOps team and solving security related objectives through automation.

Key Metrics

- Enhances security team accomplishments and competence by planning delivery of solutions, answering technical and procedural questions for less experienced team members, teaching improved processes, mentoring team members

- Plans security systems by evaluating network and security technologies, developing network requirements for networks and related security and network devices, implements public key infrastructure configurations (PKIs), including use of certification authorities (CAs) and digital signatures

- Adheres to industry guidelines, best practices, and approved standards

- Prepares system security reports by collecting, analyzing, and summarizing data and trends.

- Automates everyday and/or repeatable tasks, including security control enforcement

- Enhances department and organization reputation by accepting ownership for accomplishing new and different requests; exploring opportunities to add value to job accomplishments.

This role is focused on advancing cybersecurity for critical infrastructure assets, primarily within on-premises environments supporting power generation. The ideal candidate will bring a strong foundation in computer networking, combined with scripting and data transformation skills to automate security controls, validate configurations, and drive insight through data.

- Solid understanding of computer networking fundamentals, including TCP/IP, routing, switching, VLANs, NAT, firewalls, and segmentation. Experience with industrial or air-gapped networks is a plus.

- Experience with security-relevant infrastructure components, such as firewalls, switches, Windows/Linux servers, and endpoint protection platforms.

- Proficiency in scripting and automation, particularly using PowerShell, JavaScript and/or Python, to automate routine tasks, enforce security controls, and validate compliance.

- Ability to work with and visualize large data sets, transforming raw security data (e.g., from vulnerability scanners, EDR, network logs) into actionable insights using tools such as Power BI, Excel, or similar.

Job Family

Information Technology

Vistra Corporate Services Company

Irving, Texas

Texas