**The Opportunity**:
**What we're looking for**:
- ** Education**: Bachelor’s degree in computer science, Information Security, or a related field, or equivalent real-world experience.
- ** Industry certifications**such as Certified Information Systems Security Professional (CISSP), Certified Secure Software Lifecycle Professional (CSSLP), or equivalent certifications or trainings are a plus, but not required.
- ** 3+ years in software development** or adjacent fields, with expertise in Java or PHP preferred.
- In-depth knowledge and understanding of compliance standards such as CMMC, PCI DSS, HIPAA, or GDPR
- In-depth knowledge of security standards such as ISO , NIST CSF (CyberSecurity Framework), and/or NIST 800-171.
- Familiarity with OWASP SAMM v2
- Familiarity with operational technology security concepts and practical experience in this domain.
**Who you are**:
- Knowledgeable of security leading practices, authentication mechanisms, and encryption techniques.
- Good communicator with collaboration skills to effectively collaborate with teams and present security findings to technical and non-technical stakeholders.
- Works independently and as part of a team, with a proactive attitude toward problem-solving.
**How you will create an impact**:
- Collaborate with development teams, guiding them to integrate security best practices throughout the secure software development lifecycle (SSDLC).
- Utilize your extensive background in software development to identify and address security vulnerabilities effectively.
- Design and implement advanced security controls, authentication mechanisms, and encryption techniques to protect sensitive data and ensure compliance with relevant regulations.
- Create security requirements to go along with business requirements during the development lifecycle.




- Guide the business in prioritization of security features that are requested by customers and improve protection of our customers and their data.
- Assist in driving initiatives to reduce technical debt that creates risk.
- Collaborate cross-functionally to interpret and implement security measures in accordance with applicable data privacy laws and regulations.
- Develop and design policies, processes, and procedures to provide guidance to software teams to help build our software more securely.
**Disclaimer**:
The above statements are intended to describe the general nature and level of work being performed by employees assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of employees assigned to this position. Avantor is proud to be an equal opportunity employer.
**Why Avantor?**
**Dare to go further in your career.**Join our general team of 14,000+ associates whose passion for discovery and determination to overcome challenges relentlessly advances life-changing science.
**The work we do changes people's lives for the better.** It brings new patient treatments and therapies to market, giving a cancer survivor the chance to walk his daughter down the aisle. It enables medical devices that help a little boy hear his mom's voice for the first time. Outcomes such as these create unlimited opportunities for you to contribute your talents, learn new skills and grow your career at Avantor.
**EEO Statement**:
We are an Equal Employment/Affirmative Action employer and VEVRAA Federal Contractor. We do not discriminate in hiring on the basis of sex, gender identity, sexual orientation, race, color, religious creed, national origin, physical or mental disability, protected Veteran status, or any other characteristic protected by federal, state/province, or local law.
For more information about equal employment opportunity protections, please view the Know Your Rights poster.
**3rd Party Non-Solicitation Policy**:

📌 Sr Application Security Engineer (Ciudad de México)
🏢 Avantor
📍 Ciudad de México