A2MAC1

Global benchmarking platform for competitive insights

Senior Cybersecurity Engineer

Security Engineering & ArchitectureConfirmed live in the last 24 hours

Full-timeSantiago de Querétaro, Qro., MexicoNo salary listed

About the Job

Requirements

Requires 5–8 years of significant successful experience in IT infrastructure, application security, and cybersecurity operations or engineering.
A Bachelor's degree is acceptable with a strong track record; an engineering degree or Master's in IT/Security is a plus.
Requires professional English and strong written skills for standards and audit evidence narratives.
Must have Azure Security and Governance, Sentinel and Defender, Purview, Entra identity and access management, and Azure Security Architecture experience.
Requires strong communication, negotiation, leadership behaviors, problem-solving, and analytical skills.
Requires hands-on expertise in Azure, Microsoft 365, Entra, Defender, Intune, Purview data loss prevention and information protection, Sentinel security information and event management/security orchestration automation and response, and Azure DevOps continuous integration/continuous delivery.
Requires strong networking and systems foundations, including Windows, Linux, Active Directory, firewalls, virtual private networks, domain name system, dynamic host configuration protocol, and Wi-Fi, plus the ability to drive complex remediation.
Requires strong security fundamentals, including vulnerability management, Open Worldwide Application Security Project principles, penetration-testing concepts, and AI security, and the ability to turn incidents and findings into structural improvements.
Requires strong scripting and automation capability with PowerShell and Python, and the ability to operate with Agile and Kanban.
Requires knowledge of ITIL/IT service management, ISO 27001, NIST, and regulatory contexts including GDPR and TISAX.

Responsibilities

Own one or more security capabilities or platforms end to end, including designing, implementing, operating, and evolving them in response to threats and business needs.
Serve as the Level 3 technical authority for complex or high-impact incidents by leading investigations, performing deep root-cause analysis, and defining long-term preventive engineering actions.
Reduce the exposure surface by improving vulnerability management processes, prioritization, and engineering remediation patterns.
Ensure operational excellence for anti-phishing and data loss prevention through advanced tuning, policy design, exception governance, and evidence-by-default.
Embed security into DevOps and product environments through threat-modeling facilitation, application security tooling and guardrails, and automation to shift security left.
Design and maintain AI security implementation patterns for data protection, identity controls, and safe-use guardrails aligned with compliance needs.
Strengthen the outsourced security operations center partner operating model by refining escalation criteria, enriching context, improving runbooks, and reducing noise through engineering.
Mentor and coach teams on secure engineering practices, troubleshooting methodology, and adoption of standards.

Desired Qualifications

Ethical hacking experience.
Automotive or industrial experience.
Additional professional language skills in French, German, or Chinese.

Senior Cybersecurity Engineer

A2MAC1 · Santiago de Querétaro, Mexico · Full-time · Posted 2026-07-31

Workplace: on_site

Department: Technology > IT, Security & Cloud > IT & Security

Description

Manage security capabilities and lead complex L3 incident response and preventive engineering, ensuring the outsourced SOC’s detections and escalations translate into structural improvements across identity, endpoint, email, DLP, cloud, DevOps, Product and AI security.

The Senior role designs and drives resilient security solutions and reduces exposure surface by turning repeated incidents, vulnerabilities, and audit findings into prioritized roadmaps, automation, and guardrails—balancing security, usability, and compliance.

Tasks & Responsabilities

· End-to-end ownership of one or more security capabilities/platforms: design, implement, operate, and evolve them with threats and business needs.

· Serve as L3 technical authority for complex/high-impact incidents: lead investigations, perform deep RCA, and define long-term preventive engineering actions.

· Drive exposure surface reduction by improving vulnerability management processes, prioritization, and engineering remediation patterns.

· Ensure operational excellence for anti-phishing and DLP (advanced tuning, policy design, exception governance, evidence-by-default).

· Embed security into DevOps and product environments: threat modeling facilitation, application security tooling/guardrails, and automation to shift left.

· Design and maintain AI security implementation patterns (data protection, identity controls, safe usage guardrails) aligned with compliance needs.

· Strengthen the SOC partner operating model: refine escalation criteria, enrich context, improve runbooks, and reduce noise via engineering.

· Mentor/coach (as IC leadership) on secure engineering practices, troubleshooting methodology, and standards adoption across teams.

Requirements

Professional Experience & Studies

Experience: 5–8 years of significant successful experience in IT infrastructure, application security and cybersecurity operations or engineering.
Studies: Engineering degree or Master’s in IT/Security is a plus; Bachelor’s remains acceptable with strong track record (consistent with your baseline).
Language: Professional English; strong written skills for standards and audit evidence narratives.

Certifications

Must have

Azure Security & Governance, Sentinel/Defender, Purview, Entra IAM, Azure Security Architecture.

Nice to have

Ethical hacking experience.

Skills & Abilities

Must have

Strong communication, negotiation, leadership behaviors (“can do”, “team player”), problem-solving and analytical skills.
Expert-level hands-on expertise: Azure/M365/Entra, Defender, Intune, Purview DLP/MIP, Sentinel SIEM/SOAR automation, Azure DevOps CI/CD.
Strong networking and system foundations (Windows/Linux/AD, firewall/VPN/DNS/DHCP/Wi‑Fi) and ability to drive complex remediation.
Strong security fundamentals: vulnerability management, OWASP, pentesting concepts, AI security; ability to turn incidents/findings into structural improvements.
Strong scripting/automation capability (PowerShell/Python) and ability to operate with agile/Kanban.
Knowledge of standards and governance: ITIL/ITSM, ISO27001/NIST, regulatory context (GDPR/TISAX).

Nice to have

Automotive/industrial experience; additional professional languages (French/German/Chinese).

Benefits

Biweekly Payment

IMSS

Chritsmas Bonus

Vacations by the law

Vacations bonus by the law

Food Vouchers

Gas Vouchers

Medical Insurance only for employee

Life Insurance only for employee

Apply

Apply at A2MAC1

About the Company

A2MAC1

Global benchmarking platform for competitive insights

A2MAC1 operates as a global benchmarking platform that provides competitive insights and innovation decoding services to a wide range of industries. It uses proprietary technology to decode product developments and innovations, delivering end-to-end benchmarking and data analysis via subscriptions and service fees. The platform helps clients move from reacting to competitors to proactively spotting opportunities and shaping future progress through actionable insights. With 25+ years of experience and a presence in 14 countries and 730+ staff, A2MAC1 differentiates itself through its mature, data-driven approach, broad industry coverage, and an integrated service model that combines technology, benchmarking, and advisory insights to keep clients ahead of the competition.

Company size: 501-1,000
Company stage: Not listed
Total funding: Not listed
Headquarters: Hary, France
Founded: 1997

Recently Posted Jobs

Explore more opportunities at A2MAC1

See more jobs