Responsibilities
Create threat models using STRIDE and apply Security by Design and Secure SDLC practices.
Analyze and manage information-security risks, attack surfaces, information flows, vulnerabilities, and security controls.
Assess the security of web, mobile, backend, API, service, and integration environments, including Windows, Linux, and databases.
Develop security recommendations and track vulnerability evaluation and remediation.
Collaborate with development, architecture, and infrastructure teams across distributed, service-based environments.
Translate complex technical risks into understandable business impacts for technical, executive, and business audiences.
Use AI as support for threat modeling, risk analysis, test-case generation, and security-control reviews.
Manage multiple initiatives and stakeholders while identifying security risks, improvement opportunities, and operational efficiencies.
Requirements
Knowledge of web, mobile, and backend application security.




Knowledge of Security by Design, Secure SDLC, STRIDE threat modeling, and information-security risk analysis.
Knowledge of OWASP Top 10 Web, OWASP Mobile Top 10, API security, services, integrations, Windows, Linux, and database security.
Experience collaborating with development, architecture, and infrastructure teams.
Knowledge of distributed, service-based, and microservices architectures.
Critical thinking, risk-oriented analysis, effective communication, organization, and the ability to manage multiple initiatives and stakeholders.
Conversational intermediate English and advanced Spanish are indispensable and will be evaluated.
Foreign residents of Mexico must have valid INE, CURP, NSS, and RFC documents.
Benefits
Hybrid work arrangement in Mexico City.
Gross salary of $41,500 monthly.
Benefits above those required by law.

📌 Application Security Engineer (Xico)
🏢 Gsb Solutions
📍 Xico