Senior Cyber Security Engineer

About Unique Vacations, Inc. & Sandals Resorts InternationalUnique Vacations Inc. is an affiliate of the worldwide representative of Sandals and Beaches Resorts. We take pride in providing sales, marketing, public relations, advertising and creative services to Sandals and Beaches Resorts to showcase the Luxury Included experience, which the guests have come to adore. Designed for couples in love, Sandals Resorts boasts 15 Luxury Included resorts located on the Caribbean’s best beaches in Jamaica, Bahamas, Antigua and more. Beaches Resorts was born in 1997 from couples wanting to share these experiences with their families.Position SummaryUnique Vacations, Inc. is seeking an experienced Senior Cyber Security Engineer to join its Information Security team in Panama City, Panama. This individual will be a hands-on technical expert responsible for securing the organization's identity, endpoint, email, and cloud environments. The ideal candidate brings deep expertise in Active Directory and Microsoft 365 security, strong cloud security experience across AWS and SaaS products, with a proven proficiency with leading cloud-native and endpoint security tooling. This role is critical to safeguarding guest and corporate data across a global hospitality enterprise.Key ResponsibilitiesDesign, implement, and maintain security controls across Active Directory, Azure AD/Entra ID, and Microsoft O365 environments, including identity governance, conditional access, and privileged access management.Monitor, investigate, and respond to security incidents and alerts across email, endpoint, network, and cloud environments, ensuring timely containment and remediation.Support the SOC team with endpoint detection and response (EDR), including policy tuning, threat hunting, and false-positive reduction.Administer and strengthen email security controls to defend against phishing, business email compromise, and other email-borne threats.Secure cloud infrastructure across AWS and Snowflake, applying least-privilege access principles, configuration hardening, and continuous monitoring using AWS Security Hub and related native tooling.Manage cloud workload and SaaS security posture using Orca Security, identifying and remediating vulnerabilities and misconfigurations across cloud environments.Develop, document, and continuously improve security policies, standards, and operational runbooks aligned to industry frameworks (NIST, CIS, ISO 27001).Partner cross-functionally with IT infrastructure, DevOps, and application teams to embed security best practices throughout the technology lifecycle.Participate in incident response, threat hunting, and on-call rotation for critical security events.Support audits, risk assessments, and compliance initiatives (PCI-DSS, GDPR, and other applicable hospitality/data privacy regulations).Stay current on emerging threats, vulnerabilities, and security technologies, recommending enhancements to the organization's security posture.Required Qualifications5+ years of experience in a cyber security engineering role, with demonstrated seniority in at least one specialization (identity, cloud, or endpoint security).Strong hands-on experience securing Active Directory and Microsoft O365 / Entra ID environments.Proven experience with email security and cloud security architecture and operations.Experience with endpoint security and EDR platforms, ideally SentinelOne and/or CrowdStrike.Working knowledge of AWS cloud security, including native tools such as AWS Security Hub.Experience securing or supporting Snowflake or comparable cloud data platforms.Familiarity with Orca Security or comparable cloud security posture management (CSPM) / cloud workload protection platforms (CWPP).Experience administering Darktrace Email & Identity Security.Strong understanding of security frameworks and best practices (NIST, CIS Controls, MITRE ATT&CK).Excellent analytical, troubleshooting, and incident response skills.Strong written and verbal communication skills; bilingual English/Spanish strongly required given the Panama location.Ability to work independently and collaboratively within a global, fast-paced hospitality environment.Preferred QualificationsRelevant industry certifications such as CISSP, CISM, GCIH, GCIA, CEH, or AWS Security Specialty.Experience with email security (MS Defender for Email, Darktrace email, Area1, etc)Experience working in hospitality, travel, retail, or another guest-data-intensive industry.Familiarity with SIEM platforms and security automation/orchestration (SOAR).Experience supporting PCI-DSS compliance in a multi-property or distributed environment.What We OfferThe opportunity to protect and shape the security posture of a globally recognized luxury hospitality brand.A collaborative, technically engaged Information Security team.Competitive compensation and benefits package.A dynamic, fast-paced environment with exposure to a broad and modern security technology stack.