Senior Application Security Engineer

Hace 14 horas

medellín, antioquia, Colombia Moon Bridge Jornada completa $ 416 Por obra

Job title: Senior Cloud & Application Security Engineer

Employment type: Full-time

About the role

Moon Bridge is hiring a Senior Cloud & Application Security Engineer in Medellín to join a growing security team supporting a US-based technology services company. You’ll identify, prioritize and fix security risks across cloud, SaaS and application environments, working directly with US-based cloud, DevOps and engineering teams.

What you’ll do

  • Manage and monitor Wiz/CNAPP and cloud security posture (CSPM) across AWS, prioritizing misconfigurations, identity risks, exposed assets and attack paths
  • Monitor SaaS security posture (SSPM), finding risky permissions, integrations and OAuth/API exposures
  • Support CrowdStrike Falcon administration and investigate endpoint and cloud workload alerts with the SOC
  • Implement and maintain security controls across AWS (IAM, EC2, S3, VPC, EKS, KMS, CloudTrail and others)
  • Prioritize vulnerabilities by business risk and drive remediation with cloud, DevOps and application teams
  • Support application security scanning (Veracode SAST/DAST, Nexus IQ) and coordinate fixes with developers
  • Build security policies, dashboards and automation to keep improving the program

What you bring

  • 6+ years of cybersecurity experience, with a strong focus on cloud security
  • Hands-on experience with Wiz or another CNAPP platform (Wiz strongly preferred)
  • Cloud Security Posture Management (CSPM) and SaaS Security Posture Management (SSPM) experience
  • CrowdStrike Falcon or similar EDR/XDR experience
  • Strong AWS security expertise and enterprise cloud security architecture knowledge
  • Cloud IAM, least privilege, and workload/container security
  • Professional English for daily work with US-based teams

Nice to have

  • Veracode SAST/DAST experience
  • Nexus IQ or other Software Composition Analysis (SCA) tools
  • Cloud logging, monitoring and security analytics
  • Certifications such as AWS Certified Security - Specialty, CCSP, CISSP or Security+
  • Work on enterprise-scale security programs with US-based teams
  • Join early, as part of a new team being built in Medellín
  • Full-time employment with all benefits required by Colombian law