Mexico
Toshiba Global Commerce Solutions - External
Banco Mercantil del Norte, S.A.
APPLICATION ENGINEER
Mexico
León, Guanajuato, Mexico
SQLAWSGCP
Automatic translation. Check the original.
About the opportunity
APPLICATION ENGINEER
At Banorte, we look for unique, strong, and extraordinary talent that drives the country's transformation and innovation, making us a great ally to grow strong with Mexico.
We are convinced that the combination of solidarity, innovation, respect, loyalty, and responsibility is the perfect formula to be the best team in the financial sector.
Job Objective
Manage, integrate, and control SIEM technologies, event correlation, and log source management in accordance with internal policies, Cybersecurity standards, and regulatory guidelines to ensure visibility, traceability, and detection of information security events, provide evidence for internal, external, and regulatory audits, and support incident management and the reduction of institutional cyber risk and the adoption of internal and regulatory frameworks (ISO/IEC 27001, ISO/IEC 27002, PCI DSS, NIST, LFPDPPP, CNBV, BANXICO), in order to ensure the integrity, availability, and confidentiality of critical business information. As a Specialist, you will propose new solutions and be responsible for adopting new cybersecurity tools and forming multidisciplinary teams.
(Mexico City)
Click the apply button and do not miss the opportunity to develop your full potential.
At Banorte, we act under a principle of equal opportunity. Therefore, we do not discriminate based on age, ethnic origin, nationality, gender, sexual orientation, marital status, social condition, health status, religious beliefs, political doctrine, or disability.
Every day you will face new and interesting challenges in your position, for which you will be responsible for:
- Managing and operating SIEM platforms, event correlation, and log management.
- Integrating and maintaining log sources from infrastructure, applications, databases, and cloud services.
- Configuring and maintaining correlation rules, alerting, and security use cases.
- Monitoring and analyzing security events for the timely detection of incidents.
- Ensuring the normalization, retention, and traceability of logs in accordance with internal policies and regulatory requirements.
- Generating reports, evidence, and technical support for internal, external, and regulatory audits.
- Addressing findings and requirements derived from audit processes related to security monitoring and logs.
- Supporting incident management and response through log analysis and timeline reconstruction.
- Participating in and coordinating strategic Cybersecurity projects related to the evolution and improvement of SIEM and monitoring platforms.
- Documenting procedures, configurations, and controls of the technologies under your responsibility.
- Staying updated on national and international regulations related to database security and Cybersecurity, including: (ISO/IEC 27001, ISO/IEC 27002, PCI DSS, NIST, LFPDPPP, CNBV, BANXICO)
Requirements
Experience
- 3 years or more in the operation or engineering of security monitoring, SIEM, and log management solutions.
- Experience in integrating multiple log sources (infrastructure, applications, databases, cloud).
Technical knowledge
- SIEM platforms (QRadar, SecOps, XSIAM, etc.) and event correlation technologies.
- Log Source Management, normalization, and log retention.
- Monitoring and analysis of security events.
- Security incident management (experience with SOC is desirable).
- Standards and reference frameworks: ISO/IEC 27001, ISO/IEC 27002, NIST Cybersecurity Framework.
- Regulatory compliance and audit support (CNBV, BANSICO, LFPDPPP – desirable).
- XQL, AQL, UDM, YARA, YARA-L, SQL, KQL languages
Key competencies
- Analysis and attention to detail
- Priority management
- Management of multidisciplinary work teams
- Collaborative work
- Focus on compliance and control
- Documentation and follow-up
English
- Intermediate B2+
Availability
- Availability to handle incidents or requirements outside of business hours in critical cases (on-call).
- Hybrid work format.
- Availability to participate in strategic projects.
Desirable technologies
- PaloAlto XSIAM, Google SecOps, IBM QRadar, Microsoft DFCA, Cribl
- Windows and Linux operating systems.
- On-premise and Cloud environments (AWS, Azure, GCP or others).
- Databases and enterprise applications as log sources.
More opportunities with one profile
Want to be considered for more roles without repeating the whole process? Create your profile and be found by companies using Nort.
Create my profile