Senior Cyber Security Engineer

About the role

Unique Vacations, Inc. is looking for a Senior Cyber Security Engineer to join its Information Security team in Panama City. The role will protect guest and corporate data across a global hospitality portfolio by securing identity, endpoint, email and cloud environments.

Key responsibilities

• Design, implement and maintain security controls for Active Directory, Azure AD/Entra ID and Microsoft 365, including identity governance, conditional access and privileged access management.
• Monitor, investigate and respond to security incidents across email, endpoint, network and cloud environments.
• Support the SOC with endpoint detection and response (EDR) tuning, threat hunting and false‑positive reduction.
• Administer email security controls to defend against phishing and business email compromise.
• Secure AWS and Snowflake infrastructures using least‑privilege principles, configuration hardening and continuous monitoring with AWS Security Hub.
• Manage SaaS security posture with Orca Security, remediating vulnerabilities and misconfigurations.
• Develop and maintain security policies, standards and runbooks aligned with NIST, CIS and ISO 27001.
• Collaborate with IT, DevOps and application teams to embed security best practices.
• Participate in incident response, threat hunting and on‑call rotation for critical events.
• Support audits, risk assessments and compliance initiatives such as PCI‑DSS and GDPR.

Required profile

• Hands‑on technical expert with deep expertise in Active Directory and Microsoft 365 security.
• Strong cloud security experience across AWS and SaaS products.
• Proven proficiency with leading cloud‑native and endpoint security tooling.
• Experience in incident response, threat hunting and on‑call rotations.
• Ability to work cross‑functionally and communicate security concepts to technical and non‑technical stakeholders.

Required skills

• Active Directory
• Azure AD / Entra ID
• Microsoft 365 / O365
• Identity Governance
• Conditional Access
• Privileged Access Management
• Endpoint Detection and Response (EDR)
• Email Security
• AWS
• Snowflake
• AWS Security Hub
• Orca Security
• NIST framework
• CIS controls
• ISO 27001
• PCI‑DSS
• GDPR