Cybersecurity Engineer II

Turtle Trax S.A.; Región Centro; Presencial; MXN 420.000 - 660.000; Jornada completa

Descripción de la vacante

Turtle Trax S.A. is seeking a Cybersecurity Engineer II to implement, operate, and improve security controls across enterprise systems and cloud platforms. You will collaborate with infrastructure, cloud, and application teams to embed security into every build and operation.

The role focuses on scaling security across acquisitions and distributed environments. Applicants should bring hands‑on experience with Microsoft 365, Entra ID, AD, endpoint management, vulnerability management, and strong

Formación

• 3–5+ years of experience in cybersecurity, IT security, or related engineering roles
• Strong hands‑on experience with: Microsoft 365 / Entra ID / Active Directory
• Endpoint management and security tools
• Vulnerability management practices
• Experience working in complex or distributed enterprise environments
• Strong troubleshooting, problem‑solving, and analytical skills
• Ability to balance security rigor with business agility

Responsabilidades

• Implement and manage security controls across: Identity & access management (IAM / Entra ID / Active Directory)
• Endpoint security and device management (e.g., Intune)
• Cloud security for SaaS and emerging platforms
• Support day‑to‑day security operations, including alert triage, investigation, and response
• Assist in improving detection and response capabilities (EDR/XDR, SIEM use cases)
• Identify, assess, and remediate vulnerabilities across infrastructure and applications
• Support vulnerability management programs aligned with enterprise risk priorities
• Partner with engineering teams to drive remediation tracking and accountability
• Help onboard newly acquired agencies into client’s security standards
• Participate in identity consolidation and cleanup, endpoint onboarding and hardening
• Ensure consistent security posture across a highly distributed organization
• Collaborate with business and technical teams to deliver secure‑by‑design solutions
• Provide actionable, pragmatic guidance that enables the business while reducing risk
• Contribute to a culture of security as a business enabler, not a blocker
• Assist with implementation of controls aligned to regulatory and industry frameworks
• Support audit readiness and evidence collection activities
• Help align security practices with evolving cyber risk and regulatory requirements
• Improve operational efficiency through automation and tooling
• Contribute to standardization of security processes across the enterprise
• Support adoption of scalable, repeatable security patterns

Conocimientos

Microsoft 365 / Entra ID / AD

Endpoint security

Vulnerability management

Troubleshooting

Analytical thinking

SIEM / EDR / XDR

IAM

Herramientas

Intune

SIEM

EDR/XDR

Descripción del empleo

The Cybersecurity Engineer II (L2) is a hands‑on technical contributor responsible for implementing, operating, and improving client’s cybersecurity capabilities across a rapidly growing enterprise. This role focuses on protecting enterprise systems, data, and users, while helping scale security controls across newly acquired agencies and modern cloud‑based platforms. You will work closely with infrastructure, cloud, and application teams to ensure security is embedded into everything we build and operate.

Required Qualifications

• 3–5+ years of experience in cybersecurity, IT security, or related engineering roles
• Strong hands‑on experience with:
• Microsoft 365 / Entra ID / Active Directory
• Endpoint management and security tools
• Vulnerability management practices
• Experience working in complex or distributed enterprise environments
• Strong troubleshooting, problem‑solving, and analytical skills
• Ability to balance security rigor with business agility

Key Responsibilities

Security Engineering & Operations

• Implement and manage security controls across:
  • Identity & access management (IAM / Entra ID / Active Directory)
  • Endpoint security and device management (e.g., Intune)
  • Cloud security for SaaS and emerging platforms
• Support day‑to‑day security operations, including alert triage, investigation, and response
• Assist in improving detection and response capabilities (EDR/XDR, SIEM use cases)

Vulnerability & Risk Management

• Identify, assess, and remediate vulnerabilities across infrastructure and applications
• Support vulnerability management programs aligned with enterprise risk priorities
• Partner with engineering teams to drive remediation tracking and accountability

M&A Integration Security

• Help onboard newly acquired agencies into client’s security standards
• Participate in:
  • Identity consolidation and cleanup
  • Endpoint onboarding and hardening
  • Security baseline enforcement
• Ensure consistent security posture across a highly distributed organization

Security Enablement (Not “Security Says No”)

• Collaborate with business and technical teams to deliver secure‑by‑design solutions
• Provide actionable, pragmatic guidance that enables the business while reducing risk
• Contribute to a culture of security as a business enabler, not a blocker

Compliance & Governance Support

• Assist with implementation of controls aligned to regulatory and industry frameworks
• Support audit readiness and evidence collection activities
• Help align security practices with evolving cyber risk and regulatory requirements relevant to insurance and data protection

Automation & Continuous Improvement

• Improve operational efficiency through automation and tooling
• Contribute to standardization of security processes across the enterprise
• Support adoption of scalable, repeatable security patterns