ABOUT BCI

Bci provides financial services to individuals and corporation. We focus on being a global leader in innovations and personalized client experience and, with more than

10,500 employees, Bci is recognized as one of the best companies in which to work and develop a career. It is the third largest privately owned bank in Chile and it has more than 300 branch offices throughout Chile and representative offices in other countries.

Bci is an Equal Opportunity Employer - All qualified applicants will receive consideration without regard to race, color, religion, gender, national origin, age, disability, veteran status, or any other factor determined to be unlawful under applicable law.

JOB SUMMARY

DUTIES OF THE POSITION

1. Proactive Remediation & Vulnerability Management

• Lead Enterprise Patching: Plan, test, schedule, and execute system patch deployments across all endpoints, mobile devices, servers, and network infrastructure, focusing on rapid, proactive remediation to minimize the attack surface.
• Vulnerability Assessments: Conduct continuous vulnerability scans and assessments; prioritize risks and partner with IT teams to drive remediation efforts before vulnerabilities can be exploited.
• Asset Hardening: Establish, document, and enforce baseline security hardening standards across all enterprise assets and systems.

2. Threat Monitoring, Detection & Incident Response

• Active Monitoring & AI Threat Defense: Monitor security event logs for suspicious activities, anomalies, and potential breaches. Stay ahead of emerging AI threats (such as automated phishing, adversarial machine learning, and deepfake social engineering) by continuously updating detection logic.
• Red and Blue Teaming Collaboration: Participate in and support red and blue team (purple teaming) exercises to validate the efficacy of our security controls, identify blind spots, and tune our alerting systems based on simulated real-world attacks.
• Incident Response & Automation: Lead incident investigation and containment efforts during high-impact security events.

3. Endpoint & Security Platform Engineering

• Endpoint Protection: Oversee the implementation, configuration, and daily management of Endpoint Detection and Response (EDR) solutions, Anti-Virus, DLP, and device access controls.
• Tool Administration: Provide hands-on management for critical security platforms, including Security Email Gateways, IPS/IDS, and database security controls.
• Cloud & Infrastructure Security: Support secure configurations and continuous security monitoring for cloud environments (AWS, Azure, SaaS, Office 365) in alignment with industry frameworks.

4. Governance, Regulatory Compliance & Documentation

• Framework & Regulatory Alignment: Ensure all technical controls, architectures, and operational procedures map directly to NIST Frameworks (CSF, SP 800-53) and demonstrate a strong understanding of banking regulations at a high level (such as FFIEC, GLBA, and FINRA).
• Audit Readiness & Documentation: Enforce security policies, network/architecture diagrams, and standard operating procedures (SOPs). Assist internal and external auditors during security reviews.

• 
  Ability to understand, speak, read and write English and Spanish
• Effectively speaking before groups of customers or employees
• Assume evolving duties and responsibilities of position
• Work all hours required to fulfill job duties and responsibilities (including, weekends, evenings and holidays as needed)
• Travel as required
• Provide coverage for other positions as requested
• Ability to carry and lift boxes and objects that may weigh between 10 and 25 pounds.
• Perform additional duties and responsibilities as assigned by management

PRE-HIRE REQUIREMENTS FOR THIS POSITION:

COMPUTER:

EDUCATION:

• Degree in Information Security, Computer Science, Software Engineering, Management Information Systems, or practical background equivalent.
• Minimum of 3 to 5 years executing hands-on responsibilities across SecOps, security engineering, or system defense.
• Proven experience operating in heavily regulated sectors, maintaining strong familiarity with financial institution standards and banking compliance requirements.

CERTIFICATIONS/LICENSES:

• Core Security: CISSP, CISA, OSCP, CHFI, or CISM
• Operations & Cloud: CCSP, AWS Certified Security, Azure Security Engineer, Google Secops

EXPERIENCE:

• Proactive Defense: A strong mindset for proactive remediation and vulnerability lifecycle management, with in-depth understanding of enterprise patch deployment processes.
• Framework Expertise: Working knowledge and practical experience implementing the NIST Cybersecurity Framework.
• Offensive/Defensive Dynamics: Familiarity with red and blue teaming methodologies and how to translate offensive findings into defensive engineering improvements.
• Modern Threat Landscape: Up-to-date awareness of emerging AI threats and how large language models (LLMs) and artificial intelligence are altering the cyber threat landscape.
• Hands-on Platform Skills: Proven experience configuring and supporting EDR tools, Firewalls, Secure Email Gateways, and vulnerability scanners.
• Scripting Ability: Proficiency with Python, Bash, or PowerShell for automation and task execution.
• Communication & Collaboration: Excellent verbal and written communication skills with the ability to explain complex regulatory and technical concepts to non-technical business partners.