Grupo Coppel

Nov 10, 2026

Endpoint Security Engineering Specialist

On-siteMexico

Mexico City, Mexico

DockerKubernetes

Automatic translation. Check the original.

About the opportunity

About: Design and optimize the architecture of protection platforms for endpoints, servers, and workloads (containers); defining hardening baselines, instrumentation of detection and response agents, and File Integrity Monitoring (FIM) to reduce the attack surface and ensure the resilience of the corporate and cloud IT infrastructure.

"At Grupo Coppel we are a community where human dignity prevails over any other condition; for this reason, we support inclusion, diversity, and equal opportunity without distinction based on race, place of origin, religion, beliefs, age, appearance, sexual orientation, gender identity, disability, etc."

Location: CDMX

Responsibilities: *

Define security baselines/hardening for workstations, servers (Windows/Linux), and containers based on industry standards (CIS Benchmarks), reducing the attack surface of the IT infrastructure. *

Design the global deployment model for endpoint detection and response solutions, ensuring continuous telemetry, detection coverage, preventive isolation, and automated threat containment on production assets. *

Define standards and policies for File Integrity Monitoring (FIM) on servers and critical systems to ensure real-time detection of unauthorized modifications to configuration files and key infrastructure. *

Lead the diagnosis and N3 forensic analysis for incidents or evasions on endpoints, performing Root Cause Analysis (RCA) to propose architectural adjustments that close structural security gaps. *

Translate findings from adversary simulation tests (Purple Team) into mitigation rules and EDR detection engineering, hardening defenses against validated invasion techniques. *

Provide security guardrails and technical oversight through advisory support to the Senior Endpoint Operations Management team, performing continuous audits to mitigate configuration drift relative to the baseline design. *

Design and integrate Cloud Workload Protection Platform (CWPP) and container environments (Docker/Kubernetes), extending security controls to the multicloud ecosystem in production. *

Coordinate technical integration between endpoint protection agents and vulnerability management tools, facilitating real-time risk visibility and accelerating remediation cycles. *

Automate documentation, the control matrix, and technical evidence of the endpoint protection status, ensuring continuous regulatory compliance and auditability for internal and external entities. *

Advise and train N1/N2 Support teams and Endpoint Analysts, sharing technical guides and specialized escalation procedures to strengthen the team's operational level. *

Knowledge: *

Experience: Minimum 3 years in cybersecurity or endpoint engineering positions. *

EDR and FIM platforms; hardening tools; container and workload protection; vulnerability scanning. (required) *

EDR/XDR/EPP administration. *

English B1

Education: Bachelor's degree in Computer Systems Engineering, Computer Science, Cybersecurity and Information Auditing Engineering, or a related field.

Benefits: *

Base salary. *

Savings fund. *

Discounts on furniture and clothing purchases. *

Christmas bonus (Aguinaldo). *

Vacation time. *

Vacation premium. *

Profit sharing. *

Birthday off. *

Study scholarships. *

School supplies. *

Family protection club. *

Pleasant work environment. *

Among other benefits and perks.

A Mexican-owned business group founded in Culiacán, Sinaloa. In 2021 it celebrates 80 years of improving the lives of millions of Mexicans. It has a presence in every state in the country, has 113,000 employees, and is one of the top 10 employers in the Mexican Republic. It is composed of three business units: Tiendas Coppel, Afore Coppel, and BanCoppel.

Languages

Endpoint Security Engineering Specialist

About the opportunity

Responsibilities: *

Knowledge: *

Benefits: *

Show your skills.Get discovered.

More opportunities with one profile

Keep exploring

On-Site IT Technical Support Engineer

38880 - DevOps/SRE Engineer

39040 - Azure DevOps SRE Engineer