Senior Cybersecurity Engineer

This is a fully remote position, open to applicants in Mexico.

📋 Description

• Design and uphold security architecture across cloud platforms (AWS, GCP, Azure), on-premises, and endpoint environments utilizing Zero Trust principles.

• Establish and enforce identity, access, and least-privilege policies across Active Directory, cloud IAM, VPNs, and internal systems.

• Oversee stringent project-based access to sensitive, licensed OEM data.

• Evaluate and enhance cloud configurations, manage secrets, and monitor for misconfigurations and policy deviations.

• Embed security within CI/CD pipelines, involving code and dependency scanning, container image scanning, secrets detection, and secure pipeline architecture.

• Define and review configurations for firewalls, routers, switches, and VPNs.

• Establish endpoint protection standards encompassing EDR, patch management, disk encryption, and MFA.

• Conduct vulnerability scans and penetration tests, prioritize results, and drive remediation efforts.

• Implement and manage logging, SIEM, and alerting systems to identify and investigate suspicious activities.

• Own incident response strategies and lead investigations, containment, and post-incident evaluations.

• Lead compliance efforts with SOC 2, ISO 27001, and similar security and compliance frameworks.

• Assist with client security assessments and questionnaires.

• Evaluate and secure AI/ML and LLM-based systems, including data access, model serving, and integrations.

• Draft and maintain security policies and conduct security awareness initiatives.

• Assess the security of third-party tools and providers prior to adoption.

• Collaborate closely with the DevOps Engineer and Technical Support Specialist, establishing security standards and providing technical guidance throughout the organization.

⛳️ Requirements

• Minimum of 7 years in cybersecurity, security engineering, or a related field (mandatory).

• Extensive hands-on experience securing AWS, GCP, or Azure environments.

• Strong expertise in IAM, Active Directory, MFA, and access control design.

• Solid understanding of firewalls, VPNs, network segmentation, and secure network architecture.

• Hands-on experience integrating security into CI/CD pipelines and containerized environments (Docker, Kubernetes).

• Familiarity with SIEM, EDR, and leading incident response efforts.

• Experience with vulnerability scanning and penetration testing tools and methodologies.

• Practical experience with SOC 2, ISO 27001, or comparable frameworks.

• Proficient in Python, Bash, and/or PowerShell for security automation purposes.

• Experience in assessing or securing AI/ML or LLM-based systems (preferred).

• Possession of CISSP, CISM, OSCP, or cloud security certifications (AWS, Azure, or GCP) (preferred).

• Advanced English proficiency, both spoken and written (B2 or higher).

• A pragmatic decision-maker who balances robust security with the requirements of a fast-paced software team while remaining deeply engaged.

• Located in Mexico and capable of supporting a global team across various time zones (US, Mexico, India).

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Opportunities for professional development and training.

• Flexible work hours and remote working options.

• Comprehensive health and wellness benefits.

• Collaborative and inclusive work environment.