Senior Internal Security & IAM Operations Engineer

UltaHost; Santander; On-site; COP 120,000,000 - 200,000,000; Full time

Job summary

UltaHost is seeking a Senior Internal Security & Security Operations Engineer to own internal security across IAM, monitoring, and incident response. You will secure identities, privileged access, endpoints, VPN, and cloud/SaaS environments while implementing robust controls.

This hands-on role requires hands-on experience with RBAC, MFA, SSO, PAM, SIEM, EDR, and a structured, cross-functional approach to risk reduction as you lead detection and response, governance, and collaboration with HR,

Qualifications

• 5+ years of hands-on experience in internal security, IAM, SOC/security operations, incident response, IT security, or a closely related role.

Responsibilities

• Design and maintain RBAC across departments, roles, and critical systems.
• Manage MFA, SSO, PAM, password vaults, API keys, SSH keys, recovery codes, and secrets.
• Own security controls around onboarding, role changes, temporary access, contractor access, and offboarding.
• Identify and remove shared, dormant, unnecessary, and excessively privileged accounts.
• Conduct regular access reviews and maintain approval and audit evidence.
• Monitor and investigate alerts from SIEM, EDR, IDS/IPS, authentication systems, cloud/SaaS platforms, internal applications, and endpoints.
• Investigate suspicious logins, compromised accounts, credential leaks, malware, privilege abuse, insider risk, and unauthorized access.
• Collect evidence, contain threats, coordinate recovery, and drive corrective actions through closure.
• Maintain detection rules, alert quality, incident records, escalation paths, and response playbooks.
• Lead internal security incidents and support infrastructure/product incidents involving identities or credentials.
• Define security requirements for laptops, VPN and remote access, email, code repositories, support platforms, finance tools, and administrative systems.
• Work closely with HR and IT on joiner/mover/leaver processes and internal security investigations.
• Support security awareness, phishing prevention, and secure handling of sensitive information and credentials.

Skills

RBAC

MFA

SSO

PAM

Identity Providers

Access Auditing

SOC Operations

Incident Response

SIEM

EDR

Cloud/SaaS

Linux Access

VPN Access

Email Security

Remote-Workforce Security

Tools

SIEM

EDR

IDS/IPS

Centralized Logging

Job description

UltaHost is seeking a Senior Internal Security & Security Operations Engineer to own internal security across IAM, monitoring, and incident response. You will secure identities, privileged access, endpoints, VPN, and cloud/SaaS environments while implementing robust controls.

This hands-on role requires hands-on experience with RBAC, MFA, SSO, PAM, SIEM, EDR, and a structured, cross-functional approach to risk reduction as you lead detection and response, governance, and collaboration with HR,