Назад
Company hidden
12 часов назад

Security Engineer (Cybersecurity)

Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US/Mexico
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Security Engineer (Cybersecurity): Executing information security operations across corporate IT, platform, and product environments with an accent on ISO 27001 compliance, application security, and vulnerability management. Focus on integrating security into the SDLC, coordinating penetration tests, managing incident response, and enforcing cloud and infrastructure security controls.

Location: On-site in the Guadalajara Area, Mexico

Company

hirify.global is an AI-enabled manufacturer that uses robotics and software to assemble data center infrastructure hardware for hyperscalers, neoclouds, and OEMs.

What you will do

  • Execute information security operations across corporate IT, platform, and product environments.
  • Maintain the ISO 27001:2022 ISMS through evidence collection, internal audits, corrective actions, and certification audits.
  • Support application security in the SDLC through threat modeling, secure code review guidance, and SAST/DAST/SCA tooling.
  • Run vulnerability management, coordinate penetration tests, and drive remediation with engineering teams.
  • Support incident response, identity and access governance, security risk assessments, and vendor reviews.
  • Maintain security policies, awareness training, and reporting on security posture, risk, and compliance.

Requirements

  • 5+ years of experience in security engineering, IT security, application security, or a related role.
  • Experience maintaining an existing ISO 27001 ISMS, including evidence collection and internal audits.
  • Knowledge of OWASP Top 10, secure SDLC practices, and hands-on SAST/DAST/SCA tools.
  • Proficiency in a scripting language such as Python and familiarity with infrastructure as code using Terraform or Ansible.
  • Knowledge of GRC platforms, cloud security, IAM, network security, encryption, logging, and monitoring.
  • Excellent written and verbal English communication skills required.

Nice to have

  • Security certifications such as Security+, GSEC, or CCSP.
  • Experience in manufacturing, industrial, IoT, or OT/ICS security.
  • Penetration testing, Zero Trust architecture, or EDR/managed SOC experience.
  • Spanish proficiency.

Culture & Benefits

  • Full-time, non-exempt employment.
  • Execution-focused role in a lean IT organization.
  • Close collaboration with the Global IT Director, Infrastructure Engineer, Platform Engineering, Software Development, Legal, Sales, and Delivery stakeholders.
  • Opportunity to contribute to AI-enabled manufacturing and data center infrastructure production.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →