Senior Cybersecurity Engineer, GRC Automation

Salary: $95,000 - 130,000 per year Requirements:

• We require a bachelors degree in information technology, a related discipline, or equivalent practical experience.
• We require at least 5 years of relevant professional experience.
• We require experience designing, implementing, and scaling GRC, CCM, or compliance automation solutions in a regulated environment.
• We require strong Python skills, or comparable automation expertise, with the ability to build, integrate, and support automated workflows and REST API-based data integrations across enterprise systems.
• We require hands-on experience integrating security control data sources into a GRC/CCM evidence pipeline for continuous control testing.
• We require experience normalizing API, telemetry, configuration, vulnerability, identity, ticketing, and assessment data into control-level evidence, exception handling, ownership, frequency, and audit-ready records across multiple domains such as CNAPP/CSPM, SIEM, XDR, CTEM, VM, ASPM, DSPM, ITSM, IAM, GRC/CCM, or AI/agent governance.
• We prefer experience building LLM-backed agentic workflows on Azure AI Foundry, GitHub, or open-source frameworks.
• We prefer familiarity with NIST AI RMF, the OWASP LLM Top 10, or similar AI risk frameworks.
• We prefer professional certifications such as Security, Network, OSCP, GIAC, or CEH.

• We analyze changes to cybersecurity solutions and their interactions with internal and external systems to evaluate control effectiveness and cyber risk.
• We resolve complex, cross-functional technical issues.
• We use cybersecurity assessments, standards, control-testing methods, and compliance frameworks to support security compliance.
• We improve the efficiency and effectiveness of security solutions, governance processes, automated controls, and monitoring capabilities.
• We review existing processes and procedures and lead improvements, automation initiatives, and remediation efforts.
• We develop and submit standard operating procedures.
• We assess business-impacting events, perform initial investigations, and evaluate control performance, exceptions, and risk indicators through continuous monitoring.
• We investigate the nature and scope of cyber incidents, control failures, and compliance exceptions.
• We support the creation of risk mitigation and remediation plans to maintain regulatory and internal compliance.
• We lead the implementation of global security initiatives, policies, compliance requirements, and continuous control monitoring practices.
• We collect, validate, and report on security metrics, control performance results, and remediation activities.
• We provide cybersecurity consulting, guidance, and support to customers and stakeholders.
• We translate security principles to help configuration teams embed security and compliance requirements into build and configuration processes.
• We monitor emerging IT/OT, cybersecurity, automation, and artificial intelligence technologies and assess their impact on security, risk, and compliance.

• AI
• API
• Azure
• GitHub
• IAM
• Support
• ITSM
• LLM
• Network
• OWASP
• Python
• REST
• Security
• Cloud
• AI Agents
• Marketing
• Web

More:

We are Marathon Petroleum Company LP, an energy industry leader committed to being a great place to work with a collaborative environment that welcomes new ideas, values diverse perspectives, and develops our people. This senior cybersecurity role focuses on GRC automation and continuous controls monitoring, helping us reduce audit friction, improve risk visibility, accelerate evidence readiness, and strengthen operational confidence. The position is based in San Antonio, Texas, with additional locations in Findlay, Ohio, and Houston, Texas. We offer a total rewards package that includes health, vision, and dental insurance, paid time off, 401(k) matching, paid parental leave, educational reimbursement, and eligibility for a discretionary annual bonus program. We are an equal opportunity employer and consider qualified applicants without discrimination, including veteran and disability status.

last updated 38 week of 2026