Senior Information Security Engineer

DOMVS iT

. Serve as a Senior Information Security Engineer .

Posted 9/29/2026full-timeRemote • BrazilSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in information security with a focus on ISO 27001 compliance, vulnerability management, and cloud security principles. Possesses strong knowledge of AI-specific security risks and governance requirements, ensuring effective risk assessment and management.

Highest-signal resume keywords

ISO 27001 ComplianceVulnerability ManagementCloud Security PrinciplesAI-Specific Security RisksCISSP Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityAudit PreparationSecurity Risk AssessmentSecurity Testing MethodologiesPenetration TestingVulnerability ScanningData Leakage PreventionAPI SecurityShadow AI RisksSupply Chain Exposure

Soft Skills

Autonomous Problem SolvingLeadership

Tools & Technologies

SIEMMDRDLPIAM

Certifications & Qualifications

CISSPCISM

Industry Keywords

NISTCSAGDPRUK Data Protection LegislationEU AI ActISO 42001

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Serve as a Senior Information Security Engineer
Independently lead ISO 27001 compliance programs, including audit preparation and certification maintenance
Manage and optimize security platforms such as SIEM, MDR, DLP, and IAM
Lead vulnerability management programs and coordinate penetration testing activities
Assess security risks associated with third parties and AI tools, taking ownership of findings and recommendations
Independently resolve complex security issues and deliver results without close supervision
Apply cloud security principles and tools
Assess AI-specific security risks, including data leakage, training models with customer-input data, API security, Shadow AI, and supply chain exposure
Support the governance of AI tools in consideration of the EU AI Act and ISO 42001

Requirements

What you’ll need

Extensive experience in information security, particularly in enterprise or operational environments
Proven experience independently leading ISO 27001 compliance programs, including audit preparation and certification maintenance
Demonstrated experience managing and optimizing security platforms such as SIEM, MDR, DLP, and IAM
Experience leading vulnerability management programs and coordinating penetration testing activities
Experience assessing security risks associated with third parties and AI tools, with clear ownership of findings and recommendations
Track record of working autonomously on complex security issues and delivering results without close supervision
In-depth knowledge of cloud security principles and tools
Strong practical knowledge of NIST, ISO 27001, CSA, GDPR, and UK data protection legislation
Solid practical knowledge of AI-specific security risks, including data leakage, training models with customer-input data, API security, Shadow AI risks, and supply chain exposure
Practical knowledge of the EU AI Act and its implications for AI tool governance within an organization
Expert knowledge of security testing methodologies, including vulnerability scanning, penetration testing, and red teaming
CISSP, CISM, or equivalent certification (preferred)
Experience in a regulated industry or a highly compliance-driven environment (preferred)
Familiarity with the governance requirements of ISO 42001 or the EU AI Act (preferred)

Benefits

Comp & perks

The support you need to achieve professional success
Collaborative and innovative work environment