Consultor de Ciberseguridad

This is a fully remote position, open to applicants in Colombia.

📋 Description

• Design and develop cybersecurity architectures for on-premise and cloud-based information services and systems.

• Conduct internal and external organizational context analyses with a holistic and risk-based approach.

• Develop and implement compliance indicators and cybersecurity maturity models.

• Create and implement advanced RedTeam attack methodologies.

• Develop and implement advanced BlueTeam defense methodologies.

• Establish and implement advanced PurpleTeam methodologies.

• Manage cybersecurity risks and maintain the incident response process.

• Oversee response and attack teams, documenting and reporting on cybersecurity incident management.

• Monitor security practices during penetration testing.

• Participate in Information Security projects.

• Address requirements and inquiries from various organizational areas and third parties.

• Monitor and control compliance with the Control Framework.

• Generate and present compliance reports, define action plans, and manage their execution.

⛳️ Requirements

• Bachelor's degree in Systems Engineering or Industrial Engineering.

• Postgraduate degree in Network Administration Technology and Information Security.

• Completed or ongoing Master's degree in cybersecurity.

• Relevant certifications in Ethical Hacking methodologies such as CEH, OSCP, OSCE, OSWE, or OSEE.

• Internal auditor certification in ISO27001:2013 (Desirable).

• Knowledge of cybersecurity architecture for on-premise and/or cloud services.

• Certification in security architecture for On-premise or Cloud solutions (GCP, Azure, AWS) (Desirable).

• Familiarity with Firewalls, IPS, WAF, Antivirus, SIEM, and IDM.

• Programming knowledge and a high level of scripting skills.

• Advanced knowledge of OSSTMM and OWASP methodologies.

• Experience in auditing networks, systems, source code, and web applications.

• Understanding of secure development and static code review tools (Desirable).

• Knowledge of Ethical Hacking methodologies and ISO 27001:2013 standards.

• Familiarity with ITIL / Cobit 4.0 / Cobit 5.0.

• English proficiency at B1 level (Desirable).

• 5 years of experience in cybersecurity architecture, planning, and execution of penetration tests and social engineering.

• Experience in managing and remediating IT vulnerabilities based on international best practices.

🏝️ Benefits

• 6-month contract with the possibility of extension.

• Remote work.