Senior Cybersecurity Engineer

About the role

A2MAC1 is hiring a Senior Cybersecurity Engineer in Querétaro, working on site within its Technology department (IT, Security & Cloud). The role manages security capabilities and leads complex Level 3 incident response and preventive engineering, turning the outsourced SOC's detections and escalations into structural improvements across identity, endpoint, email, DLP, cloud, DevOps, product and AI security. It also turns repeated incidents, vulnerabilities and audit findings into prioritized roadmaps, automation and guardrails.

Key responsibilities

• Own end-to-end one or more security platforms: design, implement, operate and evolve them with threats and business needs.
• Act as L3 technical authority for complex incidents: lead investigations, run deep root cause analysis and define long-term preventive actions.
• Reduce the exposure surface by improving vulnerability management, prioritization and remediation patterns.
• Ensure operational excellence for anti-phishing and DLP, including policy design, exception governance and evidence-by-default.
• Embed security in DevOps and product environments through threat modeling, application security tooling and automation to shift left.
• Design and maintain AI security patterns (data protection, identity controls, safe usage guardrails).
• Strengthen the SOC partner operating model: escalation criteria, context, runbooks and reduced noise.
• Mentor and coach teams on secure engineering practices, troubleshooting and standards adoption.

Required profile

• 5-8 years of significant experience in IT infrastructure, application security and cybersecurity operations or engineering.
• Engineering degree or Master's in IT/Security is a plus; a Bachelor's is acceptable with a strong track record.
• Professional English with strong written skills for standards and audit evidence narratives.
• Must hold certifications in Azure Security & Governance, Sentinel/Defender, Purview, Entra IAM and Azure Security Architecture.

Required skills

• Hands-on expertise in Azure/M365/Entra, Defender, Intune, Purview DLP/MIP, Sentinel SIEM/SOAR automation and Azure DevOps CI/CD.
• Networking and system foundations (Windows/Linux/AD, firewall/VPN/DNS/DHCP/Wi-Fi) and ability to drive complex remediation.
• Vulnerability management, OWASP, pentesting concepts, AI security and knowledge of ITIL/ITSM, ISO27001/NIST, GDPR and TISAX.
• Scripting and automation (PowerShell/Python) and agile/Kanban work.
• Nice to have: ethical hacking experience, automotive/industrial experience, French/German/Chinese.

What we offer

• Biweekly payment, IMSS and Christmas bonus.
• Legal vacation days and a vacation bonus.
• Food and gas vouchers.
• Medical insurance and life insurance for employees only.