Security Engineer

Bright Machines, Guadalajara Area, Mexico

The role

As part of the IT organization, you will execute and enforce Bright Machines' day-to-day information security program—spanning platform security, application security, and information security compliance—across our corporate, product, and manufacturing environments. The Global IT Director, to whom this role reports, sets security policy and strategy; you'll partner with the Director on that strategy while owning hands-on execution, and you'll work closely with our Infrastructure Engineer, who owns network security execution, and with Platform Engineering, our closest partner on application security.

All jobs

Security Engineer

Bright Machines, Guadalajara Area, Mexico

Posted pay

Pay not posted

Location: Guadalajara Area, Mexico
Work type: Onsite
Level: Not given
Experience: 5+ years
Skills in the job text: Python
AWS
GCP
Azure
Terraform
Ansible
Posted: Aug 14, 2026
Last check: 37 min ago
Job type: Security engineering

Apply on the Bright Machines site Sign in to save

The Bright Machines site opens in a new tab.

Bright Machines

Open tech jobs: 4
With posted pay: 25%

About Bright Machines: funding, hiring and pay

Bright Machines

About Bright Machines: funding, hiring and pay

Company facts

Money raised: At least $71.4MSum of SEC filings. A filing does not show all money that a company raises.
Newest raise: Apr 6, 2022First sale on an SEC filing

Funding records can have errors and can be missing. The company page has the links.

Check my fit

Compare your résumé with this job. See where you match, what is missing and which lines to change.

The role

What you will do

Execute day-to-day information security operations across corporate IT, platform, and product environments, in partnership with the Global IT Director, who sets security policy and strategy.
Maintain our existing ISO 27001:2022 certification: manage evidence collection, internal audits, and corrective actions, and support annual surveillance and recertification audits.
Execute customer security due diligence, completing security questionnaires (SIG, CAIQ), supporting customer audits, and tracking contractual security requirements, partnering with Legal and Sales as needed.
Partner with Platform Engineering to build application security into the SDLC: threat modeling support, secure code review guidance, and operation of SAST/DAST/SCA tooling.
Run vulnerability management across applications and platform infrastructure: scanning, triage, and driving remediation with engineering teams to SLA.
Coordinate third-party penetration tests and security assessments; track findings to closure.
Partner with the Infrastructure Engineer on the security posture of network and compute infrastructure, including our EDR/managed SOC and network IDS/IPS controls, keeping application and platform controls aligned with network security architecture.
Support security incident response: help maintain the IR plan, participate in investigations, and run periodic tabletop exercises.
Support identity and access governance for corporate and platform systems (access reviews, certifications, MFA/SSO enforcement) with IT Engineering.
Conduct security risk assessments for new vendors, tools, and third-party integrations.
Maintain information security policies, standards, and employee security awareness training (including phishing simulations), in line with direction from the Global IT Director.
Track and report on security posture, risk, and compliance status to the Global IT Director.
Help evaluate and prepare for future compliance initiatives (e.g., SOC 2 Type II) as prioritized by leadership.

Security Engineer

The role

Security Engineer

The role

What you will do

What you need

Nice to have

Rethink manufacturing

Be empowered to change an industry

Similar jobs at other companies

Engineering Manager - Infrastructure Security