Senior Information Security Engineer

Summary

Join Encora as a Senior Information Security Engineer and be responsible for designing, developing, and maintaining high-quality software solutions. Collaborate with cross-functional teams to understand business requirements and translate them into scalable and efficient software applications. Lead technical projects, mentor junior engineers, and continuously improve software development practices. This remote position is based in Peru, Colombia, Costa Rica, or Bolivia. The role involves monitoring security alerts, investigating incidents, responding to threats, building detection rules, performing threat hunting, and collaborating with internal teams and the Security Operations Center. You will leverage your expertise in security frameworks, industry tools, and scripting languages to ensure robust and reliable software systems.

Requirements

• Bachelor’s degree in computer science, software engineering, or a related field
• Extensive experience in software development with a focus on designing and building scalable applications
• Professional/ Advanced English skills
• +5 years of experience
• Knowledge of security frameworks and regulatory compliance standards (NIST CSF, SOX ITGC, GDPR, MITRE ATT&CK, etc.)
• Experience with common industry security tools and SIEM platforms
• Experience working with Microsoft security products
• Experience with scripting and automation such as Python, PowerShell, KQL, etc
• Knowledge of incident response and cloud security best practices
• Working technical knowledge of IT systems including Active Directory, Microsoft 365 and Windows OS
• Strong analytical and problem-solving skills
• Ability to work independently, take initiative, and manage workload with minimal supervision

Responsibilities

• Monitor security alerts and ServiceNow tickets, investigate incidents, and respond to threats in a timely manner
• Collaborate with the internal teams as well as Security Operations Center to respond to critical incidents
• Build, tune and maintain detection rules to improve detection and response capabilities
• Perform proactive threat hunting to detect advanced threats across the organization