RETHINK MANUFACTURING At Bright Machines®, we're innovators and experts in our craft who have joined together to manufacture the AI and data center infrastructure at the edge. We believe unifying software, intelligent automation, and data is the answer to delivering quality and flexibility at scale. We deliver products to meet the demands of today while continuously investing in our Bright Factory model to take advantage of what comes next.

Working with us means you'll have the opportunity to make lasting, impactful changes for our company and our customers. As part of the IT organization, you will execute and enforce Bright Machines' day-to-day information security program—spanning platform security, application security, and information security compliance—across our corporate, product, and manufacturing environments. The Integral IT Director, to whom this role reports, sets security policy and strategy; you'll partner with the Director on that strategy while owning hands-on execution, and you'll work closely with our Infrastructure Engineer, who owns network security execution, and with Platform Engineering, our closest partner on application security.

You will own day-to-day maintenance of our existing ISO 27001:2022 certification and execution of the customer security requirements our commercial relationships depend on. Because you'll work daily with IT, Platform Engineering, Software Development, and Delivery, strong written and verbal English communication is essential. Execute day-to-day information security operations across corporate IT, platform, and product environments, in partnership with the Global IT Director, who sets security policy and strategy.

Execute customer security due diligence,



completing security questionnaires (SIG, CAIQ), supporting customer audits, and tracking contractual security requirements, partnering with Legal and Sales as needed. Coordinate third-party penetration tests and security assessments; Partner with the Infrastructure Engineer on the security posture of network and compute infrastructure, including our EDR/managed SOC and network IDS/IPS controls, keeping application and platform controls aligned with network security architecture. Support identity and access governance for corporate and platform systems (access reviews, certifications, MFA/SSO enforcement) with IT Engineering.

Maintain information security policies, standards, and employee security awareness training (including phishing simulations), in line with direction from the Global IT Director. Track and report on security posture, risk, and compliance status to the Global IT Director. 5+ years of experience in security engineering, IT security, application security, or a closely related role.

Experience maintaining an existing ISO 27001 ISMS: evidence collection, internal audits, and support for surveillance/recertification audits. (Python) for security automation, with a strong inclination toward infrastructure-as-code (e.g., Terraform, Ansible) for codifying and enforcing security controls.



Familiarity with GRC platforms for compliance evidence and monitoring. Basic cloud security literacy (AWS, Azure, and/or GCP): IAM, network security groups, encryption, logging and monitoring.

Excellent written and verbal English communication skills, with the ability to communicate clearly with IT, Platform Engineering, Software Development, and Delivery stakeholders. Comfortable as an execution-focused security practitioner in a lean IT organization, partnering closely with the Global IT Director, Infrastructure Engineer, Platform Engineering, and staff IT Engineers rather than working in isolation. IT WOULD BE GREAT IF YOU HAD Experience in manufacturing, industrial, IoT, or OT/ICS security environments.

Exposure to penetration testing engagements, hands-on or coordinating with external testers. English language proficiency.

Bright

Machines is a next-generation, AI-enabled manufacturer focused on data center infrastructure production.

Bright

Machines uses its proprietary AI-based robotics and software to assemble AI infrastructure hardware products (i.e., data center servers) for hyperscalers, neoclouds, and leading Original Equipment Manufacturers (OEMs) to reduce their time to revenue. With its Bright Factory model, Bright Machines builds higher quality data center infrastructure at scale, addresses increasing market demands for computing power due to the surge of AI, and answers the call to the U.The company has been recognized as one of Forbes' AI 50, awarded "Best AI-based Solution for Manufacturing" by AI Breakthrough, named a "Technology Pioneer" by the World Economic Forum, and highlighted by several other leading technology and innovation organizations.

📌 Senior Security Engineer - Cyber Security (San Pedro Garza García)
🏢 Bright Machines
📍 San Pedro Garza García