Information Security Engineer

**Overview**

At EdgeUno, we are seeking a proactive and skilled **Information Security Engineer** to support our Information Security department in developing, maintaining, and improving the company’s global cybersecurity posture. This position plays a critical role in operationalizing our security strategy ensuring the confidentiality, integrity, and availability of EdgeUno’s systems, data, and infrastructure.

**Key Responsibilities**

**ISMS Governance & Documentation**
- Support maintenance and continuous improvement of the **Information Security Management System (ISMS)**aligned with **ISO 27001:2022**.
- Update and maintain **policies, processes, and procedures** to reflect evolving security controls and compliance requirements.
- Assist in risk assessments, control evaluations, and internal security reviews.

**Threat Detection, Response, and Automation**
- Configure, maintain, and create **use cases and playbooks** in **Wazuh SIEM** and **SOAR** platforms for enhanced threat detection and automated incident response.
- Participate in **incident response** activities, including investigation, containment, remediation, and reporting.
- Support continuous monitoring and alerting through **SOC** operations.

**Threat Intelligence & Protection**
- Contribute to **threat intelligence gathering**, focusing on Indicators of Compromise (IoCs) by geography and industry.
- Monitor and manage **IP reputation** and **malicious domain blocking** in line with regulatory and compliance requirements.

**Identity and Access Management (IAM)**
- Support **periodic IAM reviews**, **user cleanup**, and **recertification processes** to enforce least privilege and proper access control.
- Collaborate with IT to ensure consistent enforcement of IAM policies and account lifecycle management.

**Security Awareness & Testing**
- Help execute and evaluate **phishing and ransomware simulations** using Smartfense and others.
- Contribute to the **security awareness program** by providing technical insights and user education support.

**Audit & Compliance**
- Assist in **external security audits** with providers and clients, supplying evidence and documentation as required.
- Support **internal control testing**, **on-demand audits**, and **penetration testing** for platforms, processes, and third parties.
- Participate in **security reviews for information exchange** with vendors and partners.

**Data Protection & DLP**
- Support the **implementation, deployment, and management** of **Data Loss Prevention (DLP)** tools and processes, including data classification and monitoring.

**Defensive Security Operations**
- Maintain and optimize **Defender**, **Fortinet**, and **Linux-based** security tools.
- Use **Wireshark** and **Zabbix** for traffic analysis, anomaly detection, and network performance monitoring.

**Requirements**:

- Bachelor’s degree in **Information Security**, **Computer Science**, **Engineering**, or related field.
- 3+ years of hands-on experience in **information security**, **SOC**, or **cyber defense** operations.
- Practical knowledge of **ISO 27001**, **NIST CSF**, **MITRE ATT&CK**, and **CIS Controls**.
- Experience with **SIEM**, **SOAR**, **Vulnerability Management**, **DLP**, and **IAM** tools.
- Familiarity with **incident response**, **network monitoring**, and **threat intelligence** workflows.
- Strong command of **Linux administration** and security hardening.
- Understanding of **DevSecOps**, automation, and scripting (**Python**, **Bash** preferred).
- Excellent communication and documentation skills in **English** (Spanish and/or Portuguese highly desirable).

**What We Offer**

At EdgeUno, we provide a collaborative and fast-paced environment where innovation and security excellence are valued. You’ll have access to cutting-edge tools, professional development opportunities, and a chance to protect the infrastructure that powers cloud, gaming, streaming, and enterprise connectivity across Latin America.