Cybersecurity Engineer - Vulnerability Management

Description

**For BanBajío, people are at the center; therefore, we build a community with the best banking environment and culture** **Responsibilities and functions:** * Perform analysis, testing, and approval of configuration/update requirements for architecture and assurance standards. * Apply configurations and/or security standards in production environments. * Plan and execute reviews of secure configuration standards across technological platforms, cloud services, and cloud technologies. * Plan vulnerability management (scope, ethical hacking assessments, others). * Identify networks, connections, technological components, applications, and other elements within scope. * Define types of tests and execution criteria for tests. * Execute tests and identify vulnerabilities. * Identify and assign vulnerability remediation plans. * Monitor compliance with vulnerability treatment. * Execute re\-test procedures to verify closure of vulnerabilities. * Communicate vulnerability remediation results to stakeholders. * Decide on controls and mechanisms enabling management of the information security and cybersecurity model, as well as reduction of risk levels affecting organizational information assets and technological systems. * Decide on containment and incident response measures for organizational information assets. * Criteria enabling business decisions regarding exposure levels to security risks. * Actions and initiatives for implementing new technologies and assurance mechanisms for information assets. **Requirements:** Completed and verifiable Bachelor's degree in Cybersecurity, Systems Engineering, Computer Science, Telecommunications and Networks, ICTs, or related fields. ***Desirable:*** Experience in ethical hacking, penetration testing, and vulnerability analysis. Certifications such as CEH (Certified Ethical Hacker) or OSCP (Offensive Security Certified Professional), or certifications in vulnerability identification and analysis tools. CDN, cybersecurity frameworks such as NIST, ISO 27000, among others (at least one specialization or certification). Intrusion techniques and tactics (MITRE) and Cyber Kill Chain. Advanced penetration testing, exploit development, and ethical hacking. Ethical hacking tests and vulnerability analysis. Use of vulnerability analysis techniques and tools. Experience installing and maintaining tools for code review—such as FortiFy, Trivy, etc.—for technologies including Java, C\#, Python, .NET, JavaScript, Containers, and Databases (SQL, Oracle). **Your health, safety, and development matter to us—learn about our benefits here.** **\#bajio JT:STD**