Cybersecurity Specialist

About the company

Who are we? Redarbor is the #1 HR Tech company in Latam. We help 55 million people per month find a better job and more than 150,000 companies recruit and retain the best talent.

Our projects We are leaders in job Sites and Apps with our job sites Computrabajo (leader in Latin America), OCC in Mexico, and Infojobs and Catho in Brazil, and HR Software in Latin America (Pandapé).

Redarbor in figures

• Founded 2013
• +1,100 collaborators
• 16 offices
• 21 countries
• #1 HR Tech in Latam and #2 group of job sites with the most traffic in the world
• The leading HR Software (SaaS) in Latin America with more than 8,000 active products
• We are the best company to work for in Spain and the 11th best to work for in Europe and we have received the special Better for Business recognition, according to GPTW

Your tasks

Identity Security and Microsoft 365

• Administer and supervise security controls for Microsoft Entra ID, Microsoft 365, and other corporate platforms.
• Manage and review security configurations related to MFA, Conditional Access, Identity Protection, SSO, and Privileged Identity Management (PIM).
• Perform periodic audits of privileged accounts, administrative roles, and third-party access.
• Supervise the correct application of least privilege principles and segregation of duties.
• Execute periodic access reviews and permission recertification processes.
• Analyze audit logs, security events, and administrative activities to identify anomalous behavior or risky configurations.
• Review enterprise applications, OAuth permissions, consents, and third-party access to corporate platforms.
• Collaborate in the definition and implementation of security standards for Microsoft 365, Azure, and SaaS environments.

Security Operations and Incident Response

• Monitor, investigate, and manage security incidents.
• Coordinate containment, eradication, and recovery activities.
• Perform security analysis and support internal investigations.
• Participate in simulation exercises and improvement of incident response capability.

Vulnerability Management and Hardening

• Execute periodic vulnerability scans.
• Coordinate remediation plans with technical teams.
• Follow up on compliance with defined correction deadlines.
• Participate in penetration testing and validation of findings.
• Drive hardening initiatives and continuous improvement of the security posture.

Cloud Security and SaaS Platforms

• Participate in the protection of Microsoft Azure and Microsoft 365 environments.
• Supervise the secure configuration of corporate SaaS platforms.
• Collaborate in the administration of security solutions such as:
• Microsoft Defender XDR
• Microsoft Sentinel
• Microsoft Purview
• Netskope
• SIEM
• DLP
• CASB
• EDR/XDR
• Identify risks derived from insecure configurations, excessive access, or third-party integrations.

Governance, Risk, and Compliance

• Participate in the maintenance and improvement of the Information Security Management System (ISMS).
• Participate in internal and external audits.
• Support certification processes and maintenance of ISO 27001.
• Review security policies, procedures, and standards.
• Participate in security assessments of providers and third parties.

Security Awareness and Culture

• Collaborate in training and awareness programs.
• Participate in phishing campaigns and security simulations.

Requirements

Who are we looking for? We are looking for a Cybersecurity Specialist to join the Information Security team.

We are looking for a person who has

• Minimum of 3 years of experience in cybersecurity or information security.
• Demonstrable experience in administration and security of Microsoft 365 and Entra ID.
• Experience in vulnerability management and security incidents.
• Solid knowledge of IAM, MFA, SSO, PIM, and access controls.
• Experience in cloud environments, preferably Azure.
• Knowledge of frameworks such as ISO 27001, NIST CSF, or CIS Controls.
• Professional level of English.

• Experience with Microsoft Defender, Sentinel, Purview, and Intune.
• Experience with Netskope or other CASB/SSE solutions.
• Knowledge of GDPR, NIS2, and risk management.
• Experience in SaaS companies or cloud-first environments.
• Experience in reviewing OAuth permissions, enterprise applications, and identity security.

-Requirements-

• Minimum education: Higher education - Bachelor's degree
• 3 years of experience

What we offer

Competitive salary + Indefinite contract.

• 15 days of VACATION + flexible schedule + a day off on your BIRTHDAY
• Christmas bonus (Aguinaldo) higher than the legal requirement
• Grocery and Restaurant vouchers
• Corporate events
• And much more..