Cyber Security Engineer

We are seeking an experienced Cybersecurity Engineer to join a growing information security team at one of Latin America's leading financial institutions. This is an opportunity to contribute to the protection of critical systems, applications, and data across a dynamic and evolving technology landscape.

The ideal candidate brings hands-on technical expertise in one or more cybersecurity domains, a strong understanding of security frameworks and compliance standards, and the ability to collaborate across engineering, infrastructure, and business teams.

• Support the design, implementation, and continuous improvement of security controls across infrastructure, applications, and cloud environments
• Monitor, analyze, and respond to security events and incidents using SIEM and other detection platforms
• Identify, assess, and help remediate vulnerabilities across systems, networks, and applications
• Participate in security assessments, audits, and penetration testing activities
• Collaborate with development and infrastructure teams to embed security best practices throughout the technology lifecycle
• Contribute to the development and maintenance of security policies, standards, and procedures
• Support compliance efforts aligned with ISO 27001, PCI-DSS, NIST, OWASP, and other relevant frameworks
• Stay current on emerging threats and technologies and recommend improvements accordingly

• 3+ years in an information security or cybersecurity role
• Background in financial services or another regulated industry is a plus

• Security operations: SIEM, EDR/XDR, DLP, WAF, PAM, or CASB platforms
• Application security: SAST/DAST tools, secure SDLC, Dev Sec Ops  practices
• Cloud security: AWS, Azure, or GCP
• Network and infrastructure security
• Identity and access management (IAM, SSO, MFA)
• Vulnerability management and penetration testing

• ISO 27001, NIST CSF, OWASP, or PCI-DSS
• Incident response processes and methodologies

• Strong analytical and problem-solving abilities
• Able to communicate technical concepts to non-technical stakeholders
• Collaborative, self-directed, and committed to continuous learning

• Certifications such as CISSP, CISM, CEH, CompTIA Security+, or AWS Security