Be an Early Applicant
Empowering Construction Through Innovative Software
The Role
The Information Security Engineer will ensure system security, implement security solutions in Azure, manage incident responses, conduct security assessments, and deliver security training programs.
Summary Generated by Built In
We are HCSS. For the last 40 years, we have been developing software to help construction companies streamline their operations. Based in Sugar Land, TX, our mission is helping customers achieve excellence through our proven customer-centric, end-to-end solutions and exceptionally helpful service, while providing a great life for our employees. With this mission at the core of everything we do, HCSS is a pioneer and leader in the construction software space and a consistently recognized employer. We have earned Best Companies to Work for in Texas honors for 18 consecutive years and have been named a USA Today Top Workplace. HCSS has also been recognized by Built In as a Best Place to Work in Greater Houston and by Construction Executive for our technology innovation, reflecting our strong culture, industry leadership, and commitment to excellence.
WHO WE NEED:
An Information Security Engineer at HCSS ensures the integrity and availability of our infrastructure, making sure that all systems are secure and provisioned with just the right level of access. Working in a 15-time “Best Places to Work in Texas” organization, you will be surrounded by smart and enthusiastic colleagues and have the opportunity to further your career. You will be exposed to state-of-the-art cloud technology, server management tools, and enterprise grade applications. If this sounds exciting to you, then this is the dream job for you!
Qualifications:
- Minimum of 5 years of experience in a security role
- Strong knowledge of Azure security tools and services, including Defender for Cloud, Azure Networking, and Entra ID
- Experience in developing and delivering security training programs
- Proven experience in incident response and handling security incidents
- Excellent communication and interpersonal skills
- Strong analytical and problem-solving abilities
Preferred Qualifications:
- Relevant certifications such as CISM, or Azure Security Engineer Associate are a plus
- Bachelor's degree in Computer Science, Information Security, or a related field is a plus
Role Responsibilities:
Security Design and Implementation:
- Design, implement, and deploy security solutions within Microsoft Azure, AWS, and GCP platforms using governance mechanisms such as Azure Policy, Defender for Cloud, AWS Guard Duty, and more
- Drive improvements in log ingestion strategy for the SIEM by applying deep subject matter expertise and by partnering with relevant teams.
- Collaborate with HCSS Dev, DevOps, and IT teams to design and implement security solutions across our ecosystem
- Provide expertise in security data collection and automation, with a focus on enhancing SIEM and SOAR capabilities
Identity and Access Management:
- Collaborate with IT and HR to architect and maintain IAM solutions
- Conduct regular reviews of IAM infrastructure and synchronization, with particular focus on access levels and requirements
- Conduct regular reviews of user and application identities access levels
Incident Response:
- Lead monitoring, analysis and response to security events and incidents
- Engage with team members and stakeholders within the HCSS Security Operations Center
- Develop and maintain incident response plans and procedures
- Participate as a technical resource when security incidents are escalated
- Conduct post-incident analysis to identify root causes and implement corrective actions
- Collaborate with cross functional teams to mitigate and remediate security incidents
- Respond to and investigate security incidents and events
- Prioritize and address security-related tickets in a timely manner
Vulnerability Management:
- Conduct regular security assessments and audits to ensure compliance with industry standards and best practices
- Collaborate with Development and DevOps to address and remediate security vulnerabilities within cloud computing platforms
- Run regular vulnerability reporting for IT assets and locations
- Conduct security assessments for third party applications and integrations
- Stay abreast of the latest vulnerabilities and security technologies
Training and Development:
- Develop and deliver security training programs for employees to promote security awareness and best practices
- Create training materials, including presentations, manuals, and online resources
- Conduct regular security workshops and company-wide presentations to keep staff updated on the latest security threats and mitigation strategies
Hybrid Requirements:
- Ability to work at our Sugar Land office 2–3 days a week
BENEFITS & PERKS:
Part of our mission is to provide a great life for our employees. We believe that when our people are happy, they do their best work. Some of the benefits and perks we offer include:
- Flexible hybrid schedule
- Medical, dental, and vision coverage with company-paid and employee-paid options
- Paid holidays, sick days, and personal time off
- Employee Resource Groups (ERGs) that foster connection and inclusion
- On-site amenities including a covered basketball court, soccer field, track, pickleball/tennis courts, gym, etc.
- Dog-friendly campus and WiFi-accessible courtyards
- 401(k) with a 5% company match
- Coverage for employee professional development and wellness
- And more!
Skills Required
- Minimum of 5 years of experience in a security role
- Strong knowledge of Azure security tools and services, including Defender for Cloud, Azure Networking, and Entra ID
- Experience in developing and delivering security training programs
- Proven experience in incident response and handling security incidents
- Excellent communication and interpersonal skills
- Strong analytical and problem-solving abilities
What the Team is Saying
Jordan Bales
Software Tester
Falk Hoeppner
Senior Quality Assurance Analyst
Sierra
Project Management Supervisor
Betty
Director of Development
Henry
IT Analyst
HCSS Compensation & Benefits Highlights
-
Healthcare Strength — Employer-paid medical and dental premiums are available on select plans, alongside company-paid life, disability, and long-term care coverage. This indicates strong core protections built into the benefits package.
-
Wellbeing & Lifestyle Benefits — On-site gyms and fitness classes, sports courts and track, a wellness fund, catered lunches, frequent company events, and a dog-friendly campus enhance day-to-day experience. These amenities are presented as a regular part of the workplace offering.
-
Parental & Family Support — Paid parental leave is provided for primary and secondary caregivers, with job protection and maintained health benefits during qualifying family leave. This support extends beyond birth or adoption leave into broader family-friendly policies.
HCSS Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Since 1986, HCSS been developing software to help construction companies streamline their operations. Today, HCSS is recognized as a pioneer and leader in the market, serving thousands of construction companies across the nation. Year after year, they continue to innovate, refine, and expand their products as the industry evolves. HCSS' mission is to help customers dramatically improve their business through innovative, high-quality software and exceptionally helpful service, while providing a great life for employees.
Why Work With Us
At HCSS, we prioritize people—empowering both our customers and employees to achieve excellence. We promote from within, provide continuous professional growth, and embrace challenges as learning opportunities. Join us to build a meaningful career while delivering exceptional solutions and service.
Gallery
HCSS Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
The Company embraces hybrid working and provides flexibility to meet the needs of its employees and their lives.
Typical time on-site:
Flexible
Sugar Land, TX
