Cyber Security Engineer

About the role

Bci provides financial services to individuals and corporations and is recognized as one of the best companies to work for, with more than 10,500 employees. It is the third‑largest privately owned bank in Chile, operating over 300 branch offices nationwide and representative offices abroad. The company seeks a hands‑on, highly skilled Cybersecurity Engineer to join its Information Security team. The engineer will protect digital assets, sensitive customer data, and internal systems against sophisticated attack vectors, including emerging AI‑driven threats, while aligning defenses with the NIST Cybersecurity Framework and banking regulations.

Responsibilities

• Lead enterprise‑wide patch management: plan, test, schedule, and execute system patch deployments across endpoints, mobile devices, servers, and network infrastructure.
• Conduct continuous vulnerability scans and assessments; prioritize risks and partner with IT teams to drive remediation.
• Establish, document, and enforce baseline security hardening standards for all enterprise assets.
• Monitor security event logs for suspicious activity, anomalies, and potential breaches; update detection logic to stay ahead of AI‑driven threats.
• Participate in red and blue (purple) teaming exercises to validate security controls and tune alerting systems.
• Lead incident investigation and containment during high‑impact security events, including automation of response actions.
• Oversee implementation, configuration, and daily management of Endpoint Detection and Response (EDR), anti‑virus, DLP, and device access controls.
• Provide hands‑on administration of critical security platforms such as security email gateways, IPS/IDS, and database security controls.
• Support secure configurations and continuous monitoring for cloud environments (AWS, Azure, SaaS, Office 365) in line with industry frameworks.
• Ensure technical controls map to NIST CSF, SP 800‑53, and banking regulations (FFIEC, GLBA, FINRA) and maintain audit‑ready documentation.
• Enforce security policies, maintain network/architecture diagrams, and develop standard operating procedures; assist auditors during security reviews.
• Communicate effectively in English and Spanish, including speaking before groups of customers or employees.
• Adapt to evolving duties, work required hours (including weekends, evenings, and holidays), travel as needed, and provide coverage for other positions.
• Lift and carry boxes or objects weighing between 10 and 25 pounds.

Requirements

• Ability to operate IBM‑compatible PCs; fluency with Microsoft Word, Excel, and PowerPoint.
• Degree in Information Security, Computer Science, Software Engineering, Management Information Systems, or equivalent practical experience.
• Minimum 3–5 years of hands‑on experience in SecOps, security engineering, or system defense within heavily regulated sectors.
• Familiarity with financial institution standards and banking compliance requirements.
• Relevant certifications such as CISSP, CISA, OSCP, CHFI, CISM, CCSP, AWS Certified Security, Azure Security Engineer, or Google SecOps.

Qualifications

• Proactive mindset for remediation and vulnerability lifecycle management.
• Practical experience implementing the NIST Cybersecurity Framework.
• Understanding of red‑team and blue‑team methodologies and ability to translate offensive findings into defensive improvements.
• Awareness of emerging AI threats, including automated phishing, adversarial machine learning, and deepfake social engineering.
• Excellent verbal and written communication skills; ability to explain complex regulatory and technical concepts to non‑technical partners.
• Willingness to work flexible hours, travel as required, and provide coverage for other positions.

Skills

• Hands‑on configuration and support of EDR tools, firewalls, secure email gateways, and vulnerability scanners.
• Scripting and automation using Python, Bash, or PowerShell.
• Threat monitoring, detection, and incident response.
• Endpoint and security platform engineering.
• Governance, regulatory compliance, and documentation.
• Cloud security for AWS, Azure, SaaS, and Office 365 environments.
• Ability to communicate effectively in both English and Spanish.