EMPLEOS IT

Senior Cyber Security Consultant / Security Engine

We are seeking an experienced Cyber Security Consultant to support the design, implementation, and continuous improvement of security capabilities across enterprise environments. The successful candidate will work across multiple security domains, helping organizations strengthen their cyber resilience, protect critical assets, and align security practices with business objectives and regulatory requirements. This role offers exposure to cutting-edge technologies, cloud platforms, AI security initiatives, operational technology environments, and modern cyber defense strategies. Key Responsibilities Design, implement, and optimize cybersecurity solutions across enterprise environments. Assess security risks and recommend appropriate controls and remediation strategies. Support clients and internal stakeholders in building secure architectures and operational security capabilities. Develop and maintain security standards, policies, procedures, and technical documentation. Conduct security assessments, threat modeling, vulnerability analysis, and architecture reviews. Collaborate with infrastructure, development, cloud, AI, and business teams to embed security throughout the technology lifecycle. Participate in incident response, investigations, threat hunting, and security improvement initiatives. Stay current with emerging threats, technologies, and regulatory requirements. Areas of Expertise The ideal candidate should demonstrate strong experience in one or more of the following domains: Endpoint, EDR/XDR & SOAR Security Deployment and engineering of EDR/XDR solutions such as CrowdStrike, Microsoft Defender, SentinelOne, Cortex, and similar platforms. SOAR automation, playbook development, and security workflow orchestration. Detection engineering, telemetry correlation, and incident automation. Scripting using Python, PowerShell, or equivalent technologies. Cloud & Zero Trust Security Security architecture across AWS, Azure, and GCP. Zero Trust strategy implementation and network segmentation. Identity and Access Management (IAM), federation, and conditional access. Container, Kubernetes, and CI/CD security. Application Security & DevSecOps Secure SDLC implementation. SAST, DAST, and Software Composition Analysis tooling. Secure code reviews and threat modeling. API, container, and microservices security. Threat Detection & Incident Response Threat hunting and detection engineering. SIEM content development and optimization. Digital forensics, malware analysis, and incident response. Threat intelligence collection and analysis. Governance, Risk & Compliance (GRC) ISO 27001, NIST CSF, SOC 2, PCI DSS, DORA, and related frameworks. Risk assessments and control evaluations. Audit preparation and compliance management. Third-party risk management. Data Security & Privacy Data classification and DLP solutions. Encryption, PKI, key management, and cryptographic controls. Privacy engineering and regulatory compliance. Secure data architectures and AI data protection. AI & Machine Learning Security Secure AI/ML architecture design. AI risk assessment and governance. Protection against model poisoning, prompt injection, and data leakage. Security controls throughout the AI lifecycle. Required Qualifications Bachelor's degree in Computer Science, Cyber Security, Information Technology, or related field. 5+ years of experience in Cyber Security, Information Security, or related disciplines. Strong understanding of security architecture, risk management, and cyber defense operations. Experience with cloud platforms, security tools, and enterprise security frameworks. Excellent analytical, communication, and stakeholder management skills. Ability to work independently and within cross-functional teams. Preferred Certifications: CISSP CISM CCSP GIAC Certifications CEH AWS Security Specialty Microsoft Security Certifications ISO 27001 Lead Imple

Postularme Ver aviso completo

Senior Cyber Security Consultant / Security

We are seeking an experienced Cyber Security Consultant to support the design, implementation, and continuous improvement of security capabilities across enterprise environments. The successful candidate will work across multiple security domains, helping organizations strengthen their cyber resilience, protect critical assets, and align security practices with business objectives and regulatory requirements. This role offers exposure to cutting-edge technologies, cloud platforms, AI security initiatives, operational technology environments, and modern cyber defense strategies. Key Responsibilities Design, implement, and optimize cybersecurity solutions across enterprise environments. Assess security risks and recommend appropriate controls and remediation strategies. Support clients and internal stakeholders in building secure architectures and operational security capabilities. Develop and maintain security standards, policies, procedures, and technical documentation. Conduct security assessments, threat modeling, vulnerability analysis, and architecture reviews. Collaborate with infrastructure, development, cloud, AI, and business teams to embed security throughout the technology lifecycle. Participate in incident response, investigations, threat hunting, and security improvement initiatives. Stay current with emerging threats, technologies, and regulatory requirements. Areas of Expertise The ideal candidate should demonstrate strong experience in one or more of the following domains: Endpoint, EDR/XDR & SOAR Security Deployment and engineering of EDR/XDR solutions such as CrowdStrike, Microsoft Defender, SentinelOne, Cortex, and similar platforms. SOAR automation, playbook development, and security workflow orchestration. Detection engineering, telemetry correlation, and incident automation. Scripting using Python, PowerShell, or equivalent technologies. Cloud & Zero Trust Security Security architecture across AWS, Azure, and GCP. Zero Trust strategy implementation and network segmentation. Identity and Access Management (IAM), federation, and conditional access. Container, Kubernetes, and CI/CD security. Application Security & DevSecOps Secure SDLC implementation. SAST, DAST, and Software Composition Analysis tooling. Secure code reviews and threat modeling. API, container, and microservices security. Threat Detection & Incident Response Threat hunting and detection engineering. SIEM content development and optimization. Digital forensics, malware analysis, and incident response. Threat intelligence collection and analysis. Governance, Risk & Compliance (GRC) ISO 27001, NIST CSF, SOC 2, PCI DSS, DORA, and related frameworks. Risk assessments and control evaluations. Audit preparation and compliance management. Third-party risk management. Data Security & Privacy Data classification and DLP solutions. Encryption, PKI, key management, and cryptographic controls. Privacy engineering and regulatory compliance. Secure data architectures and AI data protection. AI & Machine Learning Security Secure AI/ML architecture design. AI risk assessment and governance. Protection against model poisoning, prompt injection, and data leakage. Security controls throughout the AI lifecycle. Required Qualifications Bachelor's degree in Computer Science, Cyber Security, Information Technology, or related field. 5+ years of experience in Cyber Security, Information Security, or related disciplines. Strong understanding of security architecture, risk management, and cyber defense operations. Experience with cloud platforms, security tools, and enterprise security frameworks. Excellent analytical, communication, and stakeholder management skills. Ability to work independently and within cross-functional teams. Preferred Certifications: CISSP CISM CCSP GIAC Certifications CEH AWS Security Specialty Microsoft Security Certifications ISO 27001 Lead Imple

Postularme Ver aviso completo

Analista Soc L1 100% Remoto

Buscamos un Analista SOC L1 para monitoreo de seguridad 24x7, responsable del triage inicial de alertas y del escalamiento oportuno de incidentes, contribuyendo a la protección de la infraestructura y la información de la organización.

Responsabilidades

Monitorear eventos de seguridad en tiempo real desde SIEM, EDR y otras fuentes. Realizar triage, priorización y clasificación de alertas. Ejecutar playbooks de respuesta de nivel L1. Escalar incidentes a L2/L3 con contexto y evidencia completa. Gestionar tickets y mantener documentación clara y actualizada. Atender incidentes comunes (phishing, malware básico, accesos anómalos).

Requisitos

1 a 2 años de experiencia en SOC o roles similares.

Conocimientos básicos de redes, sistemas operativos y ciberseguridad. Familiaridad con plataformas SIEM/EDR (Splunk, QRadar, Sentinel, XSIAM, CrowdStrike, etc.). Conocimientos introductorios de MITRE ATT&CK. Buenas habilidades analíticas y de comunicación escrita. Inglés técnico intermedio.

Modalidad

100% remoto. Horario de oficina con guardias activas rotativas.

Postularme Ver aviso completo