Associate Business Information Security Specialist

About the role

Amadeus' Platform & Infrastructure Security team protects the technology foundations of its travel technology business, working across infrastructure, cloud and network security. As an Associate Business Information Security Specialist in Bogota, you will support platform-scale security operations and engineering, helping manage vulnerabilities, evolve security products and strengthen controls. You will work alongside experienced colleagues to build hands-on expertise in infrastructure, cloud, network security, PKI and emerging areas such as Post-Quantum Cryptography.

Key responsibilities

• Manage operational security requests and ServiceNow tickets, including vulnerability triage and Amadeus Unified Descriptor (AUD) approvals, with clear documentation and timely resolution.
• Perform initial vulnerability assessments, evaluate risk and business impact, and coordinate remediation with platform and development teams.
• Support the evolution of the AUD security product by contributing to backlog items, documenting architectural decisions and enabling security automation.
• Support security standards, policies and controls, including evidence collection, exception handling and alignment with PCI, ISO, SOC and GDPR requirements.
• Assist with project security reviews, monitoring use cases, PKI governance and network security zone assessments, under the guidance of senior engineers.

Required profile

• Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, IT Engineering or a related field, or equivalent practical experience.
• Typically 2-5 years of relevant experience in information security, infrastructure operations or security engineering, including internships or graduate roles.
• Clear communication, analytical thinking, curiosity and motivation to learn in a collaborative environment.

Required skills

• Foundational understanding of infrastructure, operating systems, network security and vulnerability management, able to read architectural diagrams and document findings.
• Advantage: exposure to Azure, AWS or GCP, basic scripting or automation, and basic knowledge of cryptography, PKI and network segmentation.
• Willingness to obtain a foundational certification such as CompTIA Security+, AZ-900, AWS Certified Cloud Practitioner or ITIL Foundation; additional cloud, security engineering, ISO 27001 or network security credentials are a plus.

What we offer

• Competitive remuneration, individual and company annual bonus, vacation and holiday pay, health insurance and other benefits.
• Hybrid work at the Bogota office.
• Online learning hubs with technical and soft skills training.