Ofertas de empleo Information Security Consultant, Monterrey

Job Description

Our infrastructure specialists are responsible for designing and implementing back-end services. They ensure reliability, security, and scalability for all platform layers within our solutions. Infrastructure teams provide expertise across virtualization, cloud services, storage solutions, cybersecurity, and scripting and automation.

As an InfoSec Engineer at Endava, you’ll secure infrastructure and applications by implementing security controls, conducting risk assessments, and ensuring compliance. You’ll collaborate with teams to integrate security into the SDLC, automate security operations, and respond to threats to maintain a resilient security posture.

Responsibilities:

• Deploy complex tooling into an existing infrastructure
• Deliver solutions created by the architecture team
• Build advanced hunting/custom detection rules
• Work with our clients to understand the maturity of their cyber security capabilities and help define strategies to become more cyber resilient
• Develop and implement custom security policies and procedures to minimize the risk of advanced cyber attacks
• Conduct technical security reviews, approval of suppliers and design and test documentation
• Act as subject matter expert to the business and to other members of the Security team as required
• Collaborate closely with architects, designers, engineers, and other cross-functional team members within the organization to ensure that our solutions are built to the highest security standards
• Build a beneficial relationship with customers through presales and thought leadership activities
• Represent the company in a professional manner and enrich client relationships to Endava’s benefit
• Assist with security incident management and response activities
• Support the formulation of RFP responses and the more general bidding process
• Take a proactive role in identifying security risks, mitigations, and opportunities to strengthen Endava and our client’s resilience to cyber-attacks and security incidents