Cyber Security Engineer

Full Time Regular Miami, FL, US

ABOUT BCI

Bci provides financial services to individuals and corporation. We focus on being a global leader in innovations and personalized client experience and, with more than

10,500 employees, Bci is recognized as one of the best companies in which to work and develop a career. It is the third largest privately owned bank in Chile and it has more than 300 branch offices throughout Chile and representative offices in other countries.

Bci is an Equal Opportunity Employer - All qualified applicants will receive consideration without regard to race, color, religion, gender, national origin, age, disability, veteran status, or any other factor determined to be unlawful under applicable law.

We are seeking a hands-on, highly skilled Cybersecurity Engineer to join our Information Security team. In this role, you will be directly responsible for protecting our digital assets, sensitive customer data, and internal systems against sophisticated attack vectors, including emerging AI-driven threats.

This position requires a strategic yet hands-on defender who prioritizes proactive remediation over reactive firefighting. You will lead enterprise-wide patch management, maintain critical security platforms, and actively hunt for threats while ensuring our defenses align with the NIST Cybersecurity Framework (CSF) and high-level banking regulations. By collaborating across IT, Compliance, and offensive/defensive security disciplines, you will help continuously harden our environment and maintain a robust, audit-ready security posture.

The duties of the position include, but are not limited to, the following:

Lead Enterprise Patching:
Plan, test, schedule, and execute system patch deployments across all endpoints, mobile devices, servers, and network infrastructure, focusing on rapid, proactive remediation to minimize the attack surface.

Vulnerability Assessments:
Conduct continuous vulnerability scans and assessments; prioritize risks and partner with IT teams to drive remediation efforts before vulnerabilities can be exploited.

Asset Hardening:
Establish, document, and enforce baseline security hardening standards across all enterprise assets and systems.

Active Monitoring & AI Threat Defense:
Monitor security event logs for suspicious activities, anomalies, and potential breaches. Stay ahead of emerging AI threats (such as automated phishing, adversarial machine learning, and deepfake social engineering) by continuously updating detection logic.

Red and Blue Teaming

Collaboration:

Participate in and support red and blue team (purple teaming) exercises to validate the efficacy of our security controls, identify blind spots, and tune our alerting systems based on simulated real-world attacks.

Incident Response & Automation:
Lead incident investigation and containment efforts during high-impact security events.

Endpoint Protection:
Oversee the implementation, configuration, and daily management of Endpoint Detection and Response (EDR) solutions, Anti-Virus, DLP, and device access controls.

Tool Administration:
Provide hands‑on management for critical security platforms, including Security Email Gateways, IPS/IDS, and database security controls.

Cloud & Infrastructure Security:
Support secure configurations and continuous security monitoring for cloud environments (AWS, Azure, SaaS, Office 365) in alignment with industry frameworks.

Framework & Regulatory Alignment:
Ensure all technical controls, architectures, and operational…