Banco Mercantil del Norte, S.A.

Oct 22, 2026

APPLICATION ENGINEER

Mexico

León, Guanajuato, Mexico

SQLAWSGCP

Automatic translation. Check the original.

About the opportunity

APPLICATION ENGINEER

At Banorte, we look for unique, strong, and extraordinary talent that drives the country's transformation and innovation, making us a great ally to grow strong with Mexico.

We are convinced that the combination of solidarity, innovation, respect, loyalty, and responsibility is the perfect formula to be the best team in the financial sector.

Job Objective

Manage, integrate, and control SIEM technologies, event correlation, and log source management in accordance with internal policies, Cybersecurity standards, and regulatory guidelines to ensure visibility, traceability, and detection of information security events, provide evidence for internal, external, and regulatory audits, and support incident management and the reduction of institutional cyber risk and the adoption of internal and regulatory frameworks (ISO/IEC 27001, ISO/IEC 27002, PCI DSS, NIST, LFPDPPP, CNBV, BANXICO), in order to ensure the integrity, availability, and confidentiality of critical business information. As a Specialist, you will propose new solutions and be responsible for adopting new cybersecurity tools and forming multidisciplinary teams.

(Mexico City)

Click the apply button and do not miss the opportunity to develop your full potential.

At Banorte, we act under a principle of equal opportunity. Therefore, we do not discriminate based on age, ethnic origin, nationality, gender, sexual orientation, marital status, social condition, health status, religious beliefs, political doctrine, or disability.

Every day you will face new and interesting challenges in your position, for which you will be responsible for:

Managing and operating SIEM platforms, event correlation, and log management.

Integrating and maintaining log sources from infrastructure, applications, databases, and cloud services.

Configuring and maintaining correlation rules, alerting, and security use cases.

Monitoring and analyzing security events for the timely detection of incidents.

Ensuring the normalization, retention, and traceability of logs in accordance with internal policies and regulatory requirements.

Generating reports, evidence, and technical support for internal, external, and regulatory audits.

Addressing findings and requirements derived from audit processes related to security monitoring and logs.

Supporting incident management and response through log analysis and timeline reconstruction.

Participating in and coordinating strategic Cybersecurity projects related to the evolution and improvement of SIEM and monitoring platforms.

Documenting procedures, configurations, and controls of the technologies under your responsibility.

Staying updated on national and international regulations related to database security and Cybersecurity, including: (ISO/IEC 27001, ISO/IEC 27002, PCI DSS, NIST, LFPDPPP, CNBV, BANXICO)

Requirements

Experience

3 years or more in the operation or engineering of security monitoring, SIEM, and log management solutions.

Experience in integrating multiple log sources (infrastructure, applications, databases, cloud).

Technical knowledge

SIEM platforms (QRadar, SecOps, XSIAM, etc.) and event correlation technologies.

Log Source Management, normalization, and log retention.

Monitoring and analysis of security events.

Security incident management (experience with SOC is desirable).

Standards and reference frameworks: ISO/IEC 27001, ISO/IEC 27002, NIST Cybersecurity Framework.

Regulatory compliance and audit support (CNBV, BANSICO, LFPDPPP – desirable).

XQL, AQL, UDM, YARA, YARA-L, SQL, KQL languages

Key competencies

Analysis and attention to detail

Priority management

Management of multidisciplinary work teams

Collaborative work

Focus on compliance and control

Documentation and follow-up

English

Intermediate B2+

Availability

Availability to handle incidents or requirements outside of business hours in critical cases (on-call).

Hybrid work format.

Availability to participate in strategic projects.

Desirable technologies

PaloAlto XSIAM, Google SecOps, IBM QRadar, Microsoft DFCA, Cribl

Windows and Linux operating systems.

On-premise and Cloud environments (AWS, Azure, GCP or others).

Databases and enterprise applications as log sources.

Languages

APPLICATION ENGINEER

About the opportunity

Job Objective

Requirements

Experience

Technical knowledge

Key competencies

English

Availability

Desirable technologies

Show your skills.Get discovered.

More opportunities with one profile

Keep exploring

Senior Engineering Manager – Core Product (Calendar & Scheduling) Hybrid

L2/L3 Systems Engineer (MSP Experience Required)

Full Stack Developer | Remote | LATAM Only | 90007