Security Engineer – ISO 27001 & AppSec

Bright Machines, Inc.; Región Centro; Presencial; MXN 850.000 - 1.350.000; Jornada completa

Descripción de la vacante

Bright Machines is seeking an IT security leader to run day-to-day information security across corporate IT, platform, and product environments. You will partner with the Global IT Director to enforce policy, and collaborate with Infrastructure, Platform Engineering, and Delivery teams.

You will maintain the ISO 27001:2022 certification, manage audits, and support customer security questionnaires. Strong written and verbal English is essential to engage with Legal, Sales, and technical partners

Formación

• Experience maintaining an existing ISO 27001 ISMS with audits and surveillance support.
• Hands-on with application security fundamentals and SAST/DAST/SCA tooling.
• Proficiency in Python for security automation and IaC tooling (Terraform/Ansible).
• Familiarity with cloud security (IAM, network security, encryption).
• Able to complete customer security questionnaires and discuss security with stakeholders.

Responsabilidades

• Execute day-to-day information security operations across corporate IT, platform, and product environments.
• Maintain ISO 27001:2022 certification, manage evidence, audits, and remediation.
• Handle customer security due diligence, questionnaires, and audits with Legal and Sales.
• Collaborate with Platform Engineering to embed security into the SDLC and run SAST/DAST/SCA tooling.
• Lead vulnerability management, triage, and remediation with engineering teams.
• Coordinate third-party penetration tests and security assessments; track findings to closure.
• Support security posture of network and compute infrastructure with EDR/SOC controls.
• Contribute to incident response planning, investigations, and tabletop exercises.
• Oversee identity and access governance with IT Engineering (MFA/SSO).
• Perform security risk assessments for vendors and integrations.
• Maintain security policies, standards, and awareness training.
• Track and report security posture, risk, and compliance to leadership.
• Assist with future compliance initiatives (e.g., SOC 2 Type II).

Conocimientos

ISO 27001

Security engineering

Audits & compliance

English proficiency

Python scripting

IaC tooling

SAST/DAST/SCA

Cloud security

EDR/ SOC

Customer security demos

Herramientas

Snyk

Semgrep

Checkmarx

Burp Suite

Terraform

Ansible

Descripción del empleo

Bright Machines is seeking an IT security leader to run day-to-day information security across corporate IT, platform, and product environments. You will partner with the Global IT Director to enforce policy, and collaborate with Infrastructure, Platform Engineering, and Delivery teams.

You will maintain the ISO 27001:2022 certification, manage audits, and support customer security questionnaires. Strong written and verbal English is essential to engage with Legal, Sales, and technical partners