Remote Senior Cybersecurity Engineer

Description:

• The Senior Cybersecurity Engineer at TRACTIAN will be responsible for safeguarding the company’s digital assets and ensuring that all systems, applications, and data are protected from vulnerabilities and threats.
• This role involves spearheading the development and implementation of advanced security systems, protocols, and measures to protect the organization's digital infrastructure.
• The position requires deep technical knowledge and hands-on skills to evaluate, design, and implement state-of-the-art cybersecurity solutions.
• Responsibilities include overseeing and implementing secure, scalable, and highly available cybersecurity solutions across diverse platforms, primarily focusing on cloud-based environments.
• The engineer will architect, deploy, and maintain security infrastructure components, including Intrusion Detection/Prevention Systems (IDS/IPS), Security Information and Event Management (SIEM) platforms, Endpoint Detection and Response (EDR) solutions, and Web Application Firewalls (WAFs).
• Collaboration with development and engineering teams is essential to integrate security into the software development lifecycle through activities such as code reviews, threat modeling, and vulnerability assessments.
• The role also involves developing and maintaining CI/CD pipelines with a strong emphasis on security checks, tests, and analysis of code and dependencies.
• The engineer will manage advanced security tools and endpoint protection solutions to proactively detect, monitor, and respond to threats and security incidents.
• Conducting risk assessments, threat analyses, and forensic investigations is required, along with addressing vulnerabilities and responding to security incidents in a timely manner.
• The engineer will contribute to the development, maintenance, and execution of incident response plans, ensuring readiness for potential security events.
• Staying current with emerging technologies and industry trends is crucial to offer expert guidance on best practices to enhance the organization’s security posture.

Requirements:

• Candidates must have 5+ years of advanced technical experience in cybersecurity or security engineering roles.
• A comprehensive understanding of cloud security services, including AWS (e.g., IAM, Security Groups, GuardDuty) and GCP (e.g., Cloud Armor, Security Command Center), is required.
• Experience with Cloudflare for DNS, CDN, and WAF services is necessary.
• In-depth knowledge of security systems, intrusion detection, encryption technologies, network protocols, and best practices for securing cloud environments is essential.
• Proficiency with security tools such as vulnerability scanners, SIEM, DAST, and intrusion detection systems (e.g., Wazuh, Zeek, Suricata), as well as endpoint protection solutions (e.g., Sentinel One), is required.
• Expertise in vulnerability assessments and incident response processes is necessary.
• Familiarity with security standards (e.g., OAuth, OpenID Connect, SSL/TLS) and compliance frameworks (e.g., ISO 27001, NIST 800-61, SANS, SOC 2) is expected.
• Proficiency in scripting languages such as Python, PowerShell, or Bash for security automation and tool integration is required.
• Relevant certifications such as CISSP, OSCP, or CISM are highly preferred.
• Strong problem-solving skills with the ability to respond effectively to security incidents and vulnerabilities are essential.

Benefits:

• The position offers a competitive salary.
• Employees receive premium medical, dental, and vision coverage.
• Paid Time Off (PTO) includes 15 days annually.
• A 401(k) retirement plan is provided.
• Language learning opportunities are available, with fully funded Portuguese or Spanish courses to enhance skills and global reach.
• Employees can enjoy a paid day off during their birthday week.
• A Gympass membership is included, providing access to a wide range of gyms and training programs.
• A sports incentive offers a monthly bonus for regular participation in physical activities.
• After four years of service, employees earn a fully funded trip anywhere in the world as a long-term benefit.