SecOps&Incident Response Lead

Ampstek; Buenos Aires; Presencial; ARS 800.000 - 1.600.000; Jornada completa

Descripción de la vacante

Ampstek is seeking a cybersecurity-focused professional in Buenos Aires to oversee security monitoring, incident detection, and response. You will manage G2G security implementations, endpoint protection, and cross-functional collaboration with blue team and IT stakeholders.

The role requires experience in security operations, incident management, and tool deployment across SIEM, EDR/NDR, and AV. Some tasks may occur outside regular hours as needed.

Formación

• Experience in cybersecurity and IT roles with project management.
• Strong background in incident response, monitoring, and detection.
• Proficiency in security software implementation and configuration.

Responsabilidades

• Oversee SIEM monitoring, incident detection, and response.
• Handle G2G security implementations (agents, security controls).
• Manage Endpoint Security (EDR, NDR, Antispam, AV).
• Manage security events and incidents effectively.
• Collaborate with blue team, information security, governance, and IT personnel to obtain technological solutions.
• Interact with vendors to identify and manage security tools.
• Perform tasks (such as implementation of security tools) during non-working hours when required.

Conocimientos

Incident Response

Security Monitoring

Security Tools Configuration

Herramientas

SIEM

EDR/NDR/AV

Descripción del empleo

• Oversee SIEM monitoring, Incident Detection, and Response.
• Handle G2G security implementations (agents, security controls).
• Manage Endpoint Security (EDR, NDR, Antispam, AV).
• Manage security events and incidents effectively.
• Actively participate with Blue Team, Information Security, Governance, and IT personnel in obtaining technological solutions.
• Actively interact with vendors to identify and manage security tools.
• Perform tasks (such as implementation of security tools) during non-working hours when required.

Must-Have Qualifications

• Experience in Cybersecurity and/or Information Technology roles, including general technology and software development knowledge, project management, and stakeholder engagement.
• Strong background in Incident Response Management, Security Operation Monitoring, and Detection.
• Proficiency in Security Software implementation and configuration (SIEM, AV, EDR, NDR, ANTISPAM).

Preferred Qualifications

• Experience in financial services, fintech, or PCI-regulated environments