Security Engineer

Bunge; São Paulo; Presencial; BRL 110 000 - 170 000; Tempo integral

Resumo da oferta

Bunge in São Paulo, Brazil is seeking a Security Engineer to protect its global IT environment. You will design, implement, and maintain security controls, and ensure visibility into security-relevant data across endpoints and facilities.

The role requires hands-on experience with firewalls, IDS/IPS, vulnerability management, and incident response, with strong networking knowledge. CISSP/CISM/CEH preferred; after-hours on-call may be required.

Qualificações

• Bachelor's degree in Computer Science or Information Security and 2–5 years in information security.
• After hours on-call and travel up to 15% per year.

Responsabilidades

• Design, implement, and maintain security controls including firewalls and IDS/IPS.
• Design and maintain integrated platforms that collect and correlate security event data.
• Act as SME in secure enterprise IT architecture and policy alignment.
• Collaborate with IT teams, stakeholders, and vendors; communicate risks and recommendations.
• Stay updated on threats and industry best practices; research emerging threats.
• Develop and maintain security policies, procedures, and standards.
• Contribute to security awareness training for employees.

Conhecimentos

Security principles

Networking concepts

Auditing & compliance

Analytical skills

Communication skills

Formação académica

Bachelor's degree in Computer Science or Information Security

Ferramentas

Firewall

IDS/IPS

Vulnerability management

Descrição da oferta de emprego

Cidade: São Paulo, Brasil Estado: São Paulo (BR-SP) País: Brasil (BR) Número da Vaga: 46356

Overview

The Security Engineer demonstrates a high level of professionalism, prioritizing the protection of Bunge's computer systems, networks, and data from security breaches and cyber threats. This role is crucial in maintaining the confidentiality, integrity, and availability of sensitive information across Bunge’s global IT enterprise that includes over 30,000 end-points, 400 facilities across 37 countries. Specific responsibilities include system design, configuration, and implementing enterprise security systems and applications, design and engineer sustainable event data ingest, and collaborating with various teams to ensure global visibility into security relevant event data.

Main Accountabilities

• Implement Security Measures: Design, implement, and maintain security controls, including firewalls, intrusion detection/prevention systems, and access control measures, to safeguard Bunge's technology infrastructure.
• Design, implement and maintain complex integrated security platforms and applications that collect, categorize and correlate a high volume of discrete system event data.
• Security Architecture: Perform as Subject Matter Expert in the design and architecture of secure enterprise IT environments, ensuring alignment with industry best practices and Bunge's security policies.
• Collaboration and Communication: Work closely with IT teams, business stakeholders, and vendors to implement security solutions and address security concerns. Effectively communicate security risks and recommendations.
• Research and Analysis: Stay up-to-date on the latest security threats, vulnerabilities, and industry best practices. Conduct proactive research to identify emerging threats and develop appropriate security strategies.
• Policy and Procedure Development: Contribute to the development and maintenance of security policies, procedures, and standards to ensure consistent security practices across the organization.
• Training and Awareness: Provide technical input and validation to the development of security awareness training content for employees to promote a security-conscious culture and educate them about best practices for protecting company information.

Knowledge and Technical Competencies

• In-depth knowledge of security principles, practices, and technologies, including firewalls, intrusion detection/prevention systems, vulnerability management, and incident response.
• Strong understanding of networking concepts and protocols.
• Experience with security auditing and compliance frameworks.
• Excellent analytical, problem-solving, and communication skills.
• Industry certifications such as CISSP, CISM, or CEH are preferred.

Minimum Requirements

Education/Experience

• Bachelor's degree in Computer Science, Information Security, or a related field and 2-5 years of experience in information security, with a focus on security engineering and operations; or an equivalent combination of education and experience.
• After hours on-call (rotating schedule) and ad-hoc office presence.
• TRAVEL: no more than 15% per year