Analista DevSecOps

About the role

Montecon is looking for a DevSecOps Analyst to strengthen cybersecurity across its port operations. The role focuses on practical, efficient, and traceable security controls, automation, and continuous improvement in a fast‑paced environment.

Key responsibilities

• Implement and continuously improve cyber‑security controls for endpoints, servers, applications, and cloud environments.
• Design, build, and maintain secure CI/CD pipelines on GitHub, embedding security checks.
• Automate operational tasks, security controls, and remediation using PowerShell, Bash, Python and orchestration tools such as Rundeck.
• Manage infrastructure as code with Terraform.
• Lead end‑to‑end vulnerability management: detection, risk‑based prioritisation, remediation and reporting.
• Integrate and optimise security tools (EDR/XDR, application control, vulnerability scanners) within the ecosystem.
• Create security monitoring and alert mechanisms for production pipelines.
• Generate and automate audit‑ready evidence of controls.
• Document processes, architectures and controls, keeping documentation up to date.
• Identify and drive continuous‑improvement opportunities in security posture and automation.

Required profile

• Technical degree in Computer Science, Systems Engineering or related field.
• 3‑5 years of hands‑on experience in similar DevSecOps or security‑automation roles.
• Strong problem‑solving orientation, autonomy, organisational skills and clear communication.

Required skills

• PowerShell scripting
• Bash scripting
• Python programming
• GitHub and CI/CD pipeline design
• Terraform (Infrastructure as Code)
• Rundeck or comparable orchestration tools
• EDR/XDR solutions
• Vulnerability scanning and management tools
• Cloud security concepts
• Security automation and monitoring

What we offer

• On‑site work in Ciudad Vieja, Montevideo
• Full‑time schedule
• Opportunity to work in a critical public‑sector environment focused on talent development and continuous improvement