Security Engineer

Summary

Join Bitso as a Security Engineer and play a crucial role in ensuring the security and integrity of our operations, particularly within SPEI and related financial systems. You will manage and maintain security tools, identify and remediate vulnerabilities, and contribute to ISO 27001 compliance. This role involves incident response, collaboration with cross-functional teams, and developing security strategies. You will need a Bachelor's degree in a related field or equivalent experience, along with expertise in vulnerability assessment, AWS, scripting, and security standards. Bitso offers a remote-first work environment, unlimited paid time off, employee stock options, and various other benefits.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent work experience)
• Experienced with vulnerability assessment tools such as Nessus, Qualys, and Rapid7
• Skilled in analyzing security vulnerabilities, assessing risks, and developing effective mitigation strategies
• Experience in leveraging AWS for vulnerability management, utilizing services like AWS Inspector
• Proficient in scripting languages such as Python and Bash, as well as Infrastructure as Code (IaC) tools for automation and integration tasks
• Familiarity with security standards and compliance requirements (e.g., GDPR, ISO27001, NIST)
• Excellent problem-solving and analytical skills
• Effective communication and collaboration skills, with a proven track record of successfully working in cross-functional teams to oversee the lifecycle of vulnerabilities across the organization
• Ability to work autonomously, taking initiative and ownership of projects with minimal supervision, while being accountable and self-driven

Responsibilities

• Analyze and interpret vulnerability scan results, providing detailed reports and actionable recommendations
• Collaborate with cross-functional teams to prioritize and remediate identified vulnerabilities
• Develop and maintain security policies, procedures, and documentation to ensure consistent and effective security practices
• Monitor and respond to security incidents, ensuring timely resolution and thorough documentation
• Stay current with the latest security trends, vulnerabilities, and industry best practices to continuously improve the security posture
• Develop and maintain metrics to measure and report on the effectiveness of the vulnerability management program
• As part of the Security Operations team, you’ll be part of the Cyber Incident Management team which also includes on-call rotations

Preferred Qualifications

• Experience working with Mexican regulatory bodies such as CNBV and the Bank of Mexico
• Familiarity with the Mexican Fintech Law and its implications for infrastructure and security compliance
• Knowledge of the SPEI system, including its integration, security requirements, and operational processes

Benefits

• Me Time program, including unlimited paid time off
• Remote-first work environment
• Employee Stock Option program
• Zero trading fees through our Bitso Alpha app
• Extended Family Leave Policy: all birthing parents, non-birthing parents and adopting parents are eligible for a 4-months leave
• Premium health, dental and life insurances in Mexico, Gibraltar, Colombia, USA, Brazil and Argentina
• Volunteering days
• Monthly stipend for gym memberships, relaxation activities, sports equipment, cooking classes, books, entertainment and more