8 hours ago
Mexico City, MexicoSenior
Responsibilities
- Define security requirements, policies, and standards for enterprise network controls including next-generation firewalls, IDS/IPS, NDR, ZTNA/SASE, VPN, DNS security, and network segmentation.
- Design and continuously improve cloud security capabilities across Azure and AWS, including CSPM, cloud workload protection, cloud-native threat detection, secure networking, and identity and access hardening.
- Review firewall requests, network and cloud architecture changes, and cloud configurations for compliance with security policies, and drive remediation of identified gaps.
- Validate security controls through continuous monitoring, configuration audits, and control testing while tracking exceptions to closure.
- Integrate network and cloud telemetry with SIEM platforms and develop detection rules, automated playbooks, and response workflows.
- Implement version-controlled, peer-reviewed detections-as-code and policy-as-code practices and tune them using alert-quality metrics.
- Collaborate with IT, Cloud Engineering, and other teams to embed security controls into business processes and change management.
- Evaluate and operationalize network and cloud security products, build proof-of-concept integrations, and support adoption decisions.
- Provide subject-matter expertise during network and cloud security incidents and coordinate post-incident hardening.
Requirements
- Bachelor’s degree in a technical field or equivalent experience.
- At least 5 years of hands-on experience in network security, cloud security, or security engineering.
- Enterprise experience defining, assessing, and governing network security controls, reviewing firewall policies, and evaluating network architectures.
- Hands-on experience securing Azure and/or AWS environments, including cloud networking, identity and access management, and native cloud security services.
- Strong understanding of TCP/IP, routing, switching, DNS, TLS, load balancing, and their application to threat detection and prevention.
- Ability to translate security requirements into actionable standards and verify implementation.
- Proficiency with Python, PowerShell, or Bash for security automation and tool development.
- Proficient spoken and written English.
- Preferred certifications include CCNP Security, CCSP, AWS Certified Security - Specialty, Microsoft AZ-500, ISC2, GIAC, or CompTIA.
- Preferred experience includes Terraform, CloudFormation, Bicep, Azure DevOps, GitHub Actions, SIEM, SOAR, detection engineering, container and Kubernetes security, CNAPP platforms, privileged access management, digital forensics, penetration testing, and regulatory frameworks such as GDPR, CCPA, SOC2, ISO 27001, and NIST.
Benefits
- Hybrid work in the Reforma office in Mexico City on Tuesday, Wednesday, and Thursday.
- Work hours are 9 AM to 6 PM Central Standard Time.
- Competitive salary, meaningful bonus program, healthcare insurance, pension or retirement matching, comprehensive life insurance, employee assistance program, time-off plans, and paid company holidays.
- The role offers meaningful work, career progression, and a collaborative culture of innovation.
About Delinea
Delinea builds identity security and privileged access management software for enterprises, covering human and machine identities across cloud and on‑premises environments. It sells a cloud‑native platform and related tools (such as PAM and privileged identity management) on a subscription basis to IT and security teams. Founded in 2021 in San Francisco through the merger of Thycotic and Centrify, it operates as a privately held company backed by TPG.