Security Engineer - Early Career | AI, Cloud & SIEM

Jobtailor; Ciudad de México; Presencial; MXN 180.000 - 320.000; Jornada completa

Descripción de la vacante

Jobtailor in Mexico City seeks a security-focused professional to rotate across the security function in the first year, taking ownership from month one. You will review LLMs, AI tooling, and define data-protection guardrails while operating an LLM-driven investigation agent within the SIEM and coordinating with owning teams on remediation.

The role emphasizes hands-on cloud security, incident response, and scripting in Python/JavaScript, with strong emphasis on bilingual Spanish/English

Formación

• 1–2 years in security, IT, software engineering or a related technical role; internships, CTFs, bug bounties and personal projects count
• Working knowledge of at least one of AWS or GCP, including IAM, security groups/VPC firewall rules, and service accounts
• Comfort with bash, JSON, logs, and reading code in Python, JavaScript, or Go
• Basic familiarity with SPL, KQL, or a similar log query language, or willingness to become fluent quickly
• Conceptual understanding of OAuth, SSO, MFA, and service-to-service authentication
• Hands-on experience using generative AI tools in a technical context
• Strong written communication in Spanish and English
• Prior exposure to a SIEM, EDR console, or email/web security platform is nice to have
• Python or JavaScript for scripting and automation is nice to have
• Experience with SAST/dependency scanning, secrets management, or CI/CD security is nice to have
• Experience with LLM APIs, agents, or MCP tooling is nice to have
• Entry-level certifications such as Security+, AWS Cloud Practitioner, or Google Cloud certifications are nice to have
• Portuguese is nice to have

Responsabilidades

• Rotate across the security function during the first year with ownership from the first month
• Review LLMs, coding agents, and AI tooling and help define data-protection guardrails
• Operate and tune an LLM-based investigation agent on the SIEM
• Assess prompt injection, AI-tool data exfiltration, and model/agent permissions
• Triage AWS GuardDuty, GCP Security Command Center, IAM, and network configuration findings
• Run cloud configuration and posture checks and drive remediation with owning teams
• Contribute to GCP project inventory and cleanup and maintain the findings tracker
• Learn and apply Auth0, Cloudflare, and Google Workspace security controls
• Review internal tools, scripts, pull requests, secrets, permissions, and CI/CD security-sensitive changes
• Own SonarQube and dependency-scanning results, prioritize CVEs, and follow up with developers
• Write and refine Splunk queries and maintain detection rules and dashboards
• Investigate alerts, reconstruct user activity timelines, and document evidence-based findings
• Monitor EDR, investigate suspicious endpoints, and execute containment with a senior engineer
• Triage phishing reports, analyze URLs and attachments, maintain filtering policies, and run phishing simulations
• Escalate findings appropriately and work incidents through incident.io

Conocimientos

LLM-Based Investigation

Cloud Security

Scripting in Python/JavaScript

Incident Response

Data Protection

Educación

Security+ (CompTIA)

AWS Cloud Practitioner

Google Cloud Certifications

Herramientas

SIEM

EDR

Auth0

Cloudflare

Google Workspace

SonarQube

Splunk

AWS GuardDuty

GCP Security Command Center

Incident.io

Descripción del empleo

Jobtailor in Mexico City seeks a security-focused professional to rotate across the security function in the first year, taking ownership from month one. You will review LLMs, AI tooling, and define data-protection guardrails while operating an LLM-driven investigation agent within the SIEM and coordinating with owning teams on remediation.

The role emphasizes hands-on cloud security, incident response, and scripting in Python/JavaScript, with strong emphasis on bilingual Spanish/English