Security Engineer

Pyramid Consulting, Inc; Mexico; On-site; MXN 350,000 - 520,000; Full time

Job summary

Pyramid Consulting, Inc. is seeking a Security / Vulnerability Engineer to analyze security findings, coordinate remediation, and implement changes to secure applications and infrastructure.

The ideal candidate will manage server and OS patching, work with application owners and third-party vendors, and support security hardening and remediation initiatives to improve the organization’s security posture.

Qualifications

• Experience in vulnerability management and remediation.
• Strong understanding of application and infrastructure security.
• Hands-on experience with Windows and/or Linux servers.
• Familiarity with vulnerability assessment tools (Tenable, Nessus, Qualys, Rapid7).
• Excellent communication and cross-team coordination.

Responsibilities

• Analyze and assess security findings and vulnerabilities across applications and infrastructure.
• Coordinate remediation and validate security fixes.
• Implement security and infrastructure changes based on scope, complexity, and business requirements.
• Coordinate server and OS patches to maintain secure environments.
• Collaborate with application owners, infrastructure teams, and external vendors to remediate vulnerabilities.
• Track remediation activities and ensure timelines are met.
• Support security hardening and configuration management initiatives.
• Participate in testing and validation of remediation changes.

Skills

Vulnerability Management & Remediation

Application Security

Infrastructure Security

Windows/Linux Server Experience

OS Patch Management

Communication & Problem-Solving

Tools

Tenable

Nessus

Qualys

Rapid7

Job description

We are looking for a Security / Vulnerability Engineer with strong experience in application and infrastructure security. The ideal candidate will be responsible for analyzing security findings, coordinating vulnerability remediation, implementing technical changes, and managing server and OS patching activities.

Key Responsibilities

• Analyze and assess security findings and vulnerabilities across applications and infrastructure.
• Work as an Application/Systems Engineer with a strong security focus, troubleshooting and resolving security-related issues.
• Implement security and infrastructure changes based on the scope, complexity, and business requirements.
• Coordinate, test, and validate server and operating system patches to ensure secure and stable environments.
• Collaborate with application owners, infrastructure teams, and third-party vendors to identify and remediate vulnerabilities.
• Track remediation activities and ensure vulnerabilities are addressed within required timelines.
• Support security hardening, configuration changes, and other initiatives designed to improve the organization’s security posture.
• Participate in testing and validation of remediation changes before and after implementation.

Required Skills

• Experience in Vulnerability Management and Vulnerability Remediation.
• Strong understanding of Application Security and Infrastructure Security.
• Hands- on experience with Windows and/or Linux servers.
• Experience with OS and server patching.
• Strong troubleshooting and systems/application engineering skills.
• Familiarity with vulnerability assessment tools such as Tenable, Nessus, Qualys, Rapid7, or similar platforms.
• Experience working with application owners, infrastructure teams, and external vendors.
• Strong communication, coordination, and problem-solving skills.

Preferred Qualifications

• Experience with security hardening and configuration management.
• Knowledge of CVE/CVSS, vulnerability assessment, and remediation processes.
• Experience with change management and enterprise IT environments.
• Relevant certifications such as Security+, CySA+, CISSP, or similar are a plus.

Ideal Candidate

The ideal candidate is a hands- on security professional who can analyze vulnerabilities, understand their technical impact, implement remediation, and coordinate with multiple technical teams and vendors to ensure security findings are resolved effectively.