Lead Consultant - Cybersecurity Remediation Engineer Zapopan, Jalisco, Mexico

Lead Consultant – Cybersecurity Remediation Engineer

Location: Zapopan, Jalisco, Mexico; Guadalajara, Jalisco

Job ID: R-********

Date posted: 21/04/2025

Work Scheme: Hybrid

Responsibilities

• Findings Analysis & Root Cause Analysis: Review penetration test findings, dissect vulnerabilities, and conduct root cause analyses to comprehend underlying issues. Identify the most effective remediation steps for each vulnerability.
• Remediation Solutioning & Deployment: Architect, design, and deploy risk remediation solutions based on analysis, ensuring alignment with organizational security requirements and best practices.
• Risk Mitigation & Trade-off Analysis: Assess and evaluate alternative solutions, considering trade-offs related to risk, cost, implementation time, and business impact.
• Continuous Program Improvement: Aid in evolving the risk remediation program by tracking key metrics and KPIs. Document and report on remediation efforts to ensure program improvement.
• Compliance & Reporting: Ensure remediation activities comply with industry standards, regulations, and best practices (e.g., NIST, ISO). Produce detailed stakeholder reports on remediation progress and outcomes.
• Stakeholder Communication: Communicate risk findings, remediation strategies, and status updates effectively to technical and non‑technical stakeholders across the organization.

Essential Skills/Experience

• Technical depth to understand findings, identify root causes, and design remediations.
• Proven experience in risk analysis, vulnerability management, and/or IT security.
• Strong experience in penetration test result analysis and root cause identification.
• Familiarity with common penetration testing tools and techniques.
• Ability to work cross‑functionally with IT teams to design and implement remediation solutions.
• Strong problem‑solving skills with the ability to develop actionable remediation strategies.
• Experience in risk assessment, mitigation, and management, with knowledge of risk management frameworks and best practices.
• Proficiency in documenting metrics, KPIs, and remediation progress for continuous program improvement.
• Knowledge of security standards and frameworks (e.g., NIST, ISO, SOC 2).
• Strong communication skills, both written and verbal, to explain technical issues to non‑technical stakeholders.

Desirable Skills/Experience

• Experience with attack chains and ability to quantify risk based on other security controls.
• Experience with security tools and technologies.
• Familiarity with cloud environments and security practices (AWS, Azure, GCP).
• Experience in automation and scripting.
• Expertise in data analytics or reporting tools (e.g., Power BI, Tableau, Excel).