We improve lives
The IDB Group is a community of diverse, versatile, and passionate people who come together on a journey to improve lives in Latin America and the Caribbean. Our people find purpose and do what they love in an inclusive, collaborative, agile, and rewarding environment.
About this position
We are looking for a dynamic and detail-oriented Information Security Evaluation and Testing Senior Associate. You will work in the Cybersecurity Team, part of the Information Technology Department, with a group of security-minded and enthusiastic team players who provide technical advice, set security standards, perform vulnerability assessments, address challenges, and participate in the development of robust security baselines and processes for cloud and on-premise solutions.
What youโll do
- Manage the implementation and operation of the Security Evaluation and Testing Program, including penetration testing, red team exercises and application security testing.
- Document findings, present detailed reports to stakeholders, and provide remediation guidance for discovered security weaknesses.
- Develop risk-based security assessments and provide recommendations.
- Work closely with other teams to enhance defensive capabilities by sharing knowledge and feedback from simulated attacks.
- Work with development teams to ensure that secure coding practices are followed and provide guidance on how to remediate vulnerabilities.
- Provide ongoing security training for developers, QA teams, and other stakeholders on secure coding practices and application security concepts.
- When needed, support the investigation of security incidents and breaches, identifying vulnerabilities that might have been exploited.
- Provide guidance, mentorship, and knowledge-sharing with junior team members, helping to improve team skills and security maturity.
- Develop and obtain security Key Performance Indicators and tools to monitor and report on performance levels of the Security Evaluation and Testing Program.
- Conduct threat modeling exercises to identify and mitigate security risks in proposed architectures.
- Provide guidance to junior staff and other personnel
- Communicate effectively with technical personnel and management stakeholders.
What you'll need
- Education:
- Masterโs degree (or equivalent advanced degree) in Mathematics, Computer Science, Telecommunications, or other fields relevant to the responsibilities of the role.
- At least two of the following certifications or similar ones: Certified Red Team Professional (CRTP), Offensive Security Certified Professional (OSCP), Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), GIAC GWAPT, CISA, CISM, GRISC.
- Experience: At least 3 years of progressive experience in cybersecurity, security testing, information risk management or infrastructure security operations.
- Languages: Proficiency in English and one of the other Bank official languages (Spanish, French or Portuguese) is required.
Requirements
Citizenship: You currently reside or plan to reside in one of the countries listed above with citizenship in that country.
Consanguinity: You have no family members (up to fourth degree of consanguinity and second degree of affinity, including spouse) working at the IDB, IDB Invest, or IDB Lab.
Type of contract and duration
National (Local Remote Staff): National staff contract under a fully remote modality, 36 months. This contract is part of a program to hire staff to work fully remotely (not office-based). The program is set to expire at the end of 2028 and it may be extended, if successful
Location
The position can be based in any of the following countries: Argentina, Bahamas, Belize, Bolivia, Brazil, Chile, Colombia, Cost Rica, Dominican Republic, Ecuador, El Salvador, Guatemala, Guyana, Honduras, Jamaica, Mexico, Nicaragua, Panama, Paraguay, Peru, Spain, Suriname, Trinidad & Tobago and Uruguay.
What we offer
The IDB Group provides benefits that respond to the different needs and moments of an employeeโs life. These benefits include:
-A competitive compensation package-Leaves and vacations: 24 days of paid time off + 8 personal days + sick leave + gender-neutral parental leave
-Health Insurance: IDB Group provides employees and eligible dependents with a robust medical benefits program that covers medical, dental, vision, preventive care, and prescription drugs.
-Pension plan: defined benefit pension plan that provides financial security and support employees in planning for their future.
-Fully remote modality.
-Health and well-being: Access to our Health Services Center that provides preventive care and health education for employees.
-Development support: We offer tools to boost your professional profile, such as mentoring, 1:1 professional counseling, training and learning opportunities, language classes, mobility options, among others.
-Allowance: one-time non-pensionable allowance to support the purchase of equipment, office set-up and computer maintenance.
Our culture
At the IDB, we work so everyone brings their best and authentic selves to work while finding their purpose. Our people consistently strive for excellence, and we recognize and celebrate the impact of their contributions.
In our efforts to drive innovation, we intentionally include all voices, cultivate a sense of belonging and champion fairness. We welcome individuals from underrepresented groups to join us and share their unique perspectives.
We ensure that individuals with disabilities are provided reasonable accommodations to participate in the job interview process. If you require an accommodation to complete this application, please email us at accommodations@iadb.org.
- Education:
- Develop risk-based security assessments and provide recommendations.