Senior Application Security Engineer
Hace 1 día
Medellín, Antioquia, Colombia
Moon Bridge
Jornada completa
EUR 288 - EUR 416 Por obra
Gratis con email o Google
Guarda esta oferta y sigue tu búsqueda
Crea una cuenta gratis para guardar empleos, crear alertas y volver a esta oferta desde tu panel.
Gratis con email o Google
Al continuar, aceptas nuestros Términos & Política de Privacidad.
Job title: Senior Cloud & Application Security Engineer
Employment type: Full-time
About the role
Moon Bridge is hiring a Senior Cloud & Application Security Engineer in Medellín to join a growing security team supporting a US-based technology services company. You’ll identify, prioritize and fix security risks across cloud, SaaS and application environments, working directly with US-based cloud, DevOps and engineering teams. What you’ll do
- Manage and monitor Wiz/CNAPP and cloud security posture (CSPM) across AWS, prioritizing misconfigurations, identity risks, exposed assets and attack paths
- Monitor SaaS security posture (SSPM), finding risky permissions, integrations and OAuth/API exposures
- Support CrowdStrike Falcon administration and investigate endpoint and cloud workload alerts with the SOC
- Implement and maintain security controls across AWS (IAM, EC2, S3, VPC, EKS, KMS, CloudTrail and others)
- Prioritize vulnerabilities by business risk and drive remediation with cloud, DevOps and application teams
- Support application security scanning (Veracode SAST/DAST, Nexus IQ) and coordinate fixes with developers
- Build security policies, dashboards and automation to keep improving the program What you bring
- 6+ years of cybersecurity experience, with a strong focus on cloud security
- Hands-on experience with Wiz or another CNAPP platform (Wiz strongly preferred)
- Cloud Security Posture Management (CSPM) and SaaS Security Posture Management (SSPM) experience
- CrowdStrike Falcon or similar EDR/XDR experience
- Strong AWS security expertise and enterprise cloud security architecture knowledge
- Cloud IAM, least privilege, and workload/container security
- Professional English for daily work with US-based teams Nice to have
- Veracode SAST/DAST experience
- Nexus IQ or other Software Composition Analysis (SCA) tools
- Cloud logging, monitoring and security analytics
- Certifications such as AWS Certified Security
- Specialty, CCSP, CISSP or Security+
- Work on enterprise-scale security programs with US-based teams
- Join early, as part of a new team being built in Medellín
- Full-time employment with all benefits required by Colombian law
About the role
Moon Bridge is hiring a Senior Cloud & Application Security Engineer in Medellín to join a growing security team supporting a US-based technology services company. You’ll identify, prioritize and fix security risks across cloud, SaaS and application environments, working directly with US-based cloud, DevOps and engineering teams. What you’ll do
- Manage and monitor Wiz/CNAPP and cloud security posture (CSPM) across AWS, prioritizing misconfigurations, identity risks, exposed assets and attack paths
- Monitor SaaS security posture (SSPM), finding risky permissions, integrations and OAuth/API exposures
- Support CrowdStrike Falcon administration and investigate endpoint and cloud workload alerts with the SOC
- Implement and maintain security controls across AWS (IAM, EC2, S3, VPC, EKS, KMS, CloudTrail and others)
- Prioritize vulnerabilities by business risk and drive remediation with cloud, DevOps and application teams
- Support application security scanning (Veracode SAST/DAST, Nexus IQ) and coordinate fixes with developers
- Build security policies, dashboards and automation to keep improving the program What you bring
- 6+ years of cybersecurity experience, with a strong focus on cloud security
- Hands-on experience with Wiz or another CNAPP platform (Wiz strongly preferred)
- Cloud Security Posture Management (CSPM) and SaaS Security Posture Management (SSPM) experience
- CrowdStrike Falcon or similar EDR/XDR experience
- Strong AWS security expertise and enterprise cloud security architecture knowledge
- Cloud IAM, least privilege, and workload/container security
- Professional English for daily work with US-based teams Nice to have
- Veracode SAST/DAST experience
- Nexus IQ or other Software Composition Analysis (SCA) tools
- Cloud logging, monitoring and security analytics
- Certifications such as AWS Certified Security
- Specialty, CCSP, CISSP or Security+
- Work on enterprise-scale security programs with US-based teams
- Join early, as part of a new team being built in Medellín
- Full-time employment with all benefits required by Colombian law