Senior Cyber Security Engineer

**Location** Zapopan, Jalisco, Mexico**Job ID** R- **Date posted** 19/05/2025**Cyber Security Engineer - Cloud Security****About the AstraZeneca**AstraZeneca is a global biopharmaceutical business that prioritizes the discovery, development, and commercialization of prescription medicines for some of the world's most serious diseases. But we're more than one of the world's leading pharmaceutical companies.At AstraZeneca, we're proud to have an outstanding workplace culture that encourages innovation and collaboration. Here, employees are empowered to express varied perspectives - and are made to feel valued, energized and rewarded for their ideas and creativity.At AstraZeneca we:- Believe in lifelong learning.- Endeavor to be a great place to work.- Encourage a “speak up” culture.- Lead the way in sustainable IT & social impact.- Actively work towards becoming a digital organization.**About the team**ETS is a distributed team responsible for numerous IT tools and services that directly improve the efficiency of our AstraZeneca colleagues.We partner locally in more than 60 global business sites for service delivery and IT experience and are accountable for all infrastructure, cybersecurity, IT operations and End User services and technologies.ETS also handles many of the large IT contracts at AZ, as well as partnering with large organisations on behalf of AZ to deliver value and innovation through new and existing capabilities and services.**About The role**Cybersecurity is key to our IT strategy as we move towards our future objectives. We are looking for IT security professionals that can help us on the journey through this challenging and ever-changing technology landscape.Individuals who:- Understand that security is a journey and not a destination.- Understand that we cannot just buy our way in cybersecurity.- Focus on innovation to maintain a sustainable risk position against the evolving threat landscape.- Understand that we could be working against organized crime syndicates or state-sponsored attackers.- Understand attackers’ motivations and their ways of working.In this role you will operate within AstraZeneca’s global cybersecurity organization to deliver quality services and solutions that meet both business and IT needs. You will need to collaborate and influence multiple functions across a global organisation spanning Mexico, US, UK, Sweden, China, India and beyond.**The**Cyber Security Engineer - Cloud Security will be accountable for**:- Engineer cybersecurity solutions spanning cloud, on-premises, and third-party collaboration environments, with a predominant focus on cloud and data.- Collaborate with other teams in performing, assessing, and evolving IT processes that intersect any of our cybersecurity priorities.- Map governance and compliance frameworks and their controls to technical implementation, shifting hardening processes as far left as possible.- Leverage understanding of threats, weaknesses, and vulnerabilities around cloud and data to assist other areas in responding promptly and effectively to contain breaches or to address areas of concern.- Contribute to defining the future state of cybersecurity within the organisation by conducting gap analysis between our current state and the desired state for tools and services around cloud and data.**Requirements**:**Essential**- Must have 10+ Years of large enterprise IT experience, ideally with significant cloud and data exposure.- Should have experience working in a software development and systems administration organization - ideally implementing DevSecOps and process automation.- Must have experience researching, designing, and implementing security policies, standards, and procedures, including those in cybersecurity frameworks such as MITRE ATT&CK, NIST CSF, NIST SP.800-53, and NIST SP.800-61, as well as implementing cloud security reference architectures.- Familiarity with common attack techniques and their remediation or defence including social engineering, phishing, worms, trojans, rootkits, ransomware, XSS, SQL injection, remote command execution, session hijacking, DDoS, etc.- Must have solid experience configuring and managing cloud security services in an AWS organization, including service control, backup and tagging policies, firewalling, threat detection and data classification.- Must have strong experience identifying, deploying, and managing cloud security services complementary to cloud provider native services, in a multi-cloud environment spanning AWS, GCP and Azure.- Solid understanding of advanced networking configurations for hybrid-cloud in AWS, leveraging transit gateways and direct connect links.- Solid understanding of security protocols, cryptography, identity management and access control.- Knowledge of business continuity, risk assessment, disaster recovery, and computer forensics.- Ability to conduct post-mortem on security incidents a