Role: Senior Application Security Engineer

Location: Guadalajara, Mexico

Duration: Long-Term Contract

Job Summary

- We are seeking an experienced Cloud Security & CNAPP Engineer / Analyst with strong hands-on expertise in Wiz, CSPM, SSPM, CrowdStrike, AWS, Cloud Security, Veracode SAST/DAST, and Nexus IQ.
- The candidate will be responsible for identifying, assessing, prioritizing, and remediating security risks across cloud, SaaS, application, and workload environments. The role will focus on improving cloud security posture, vulnerability management, application security, threat detection, and security engineering capabilities.

Key Responsibilities Cloud Security & CNAPP

- Manage and monitor Wiz/CNAPP and CSPM capabilities across AWS and cloud environments.
- Identify and prioritize cloud misconfigurations, vulnerabilities, identity risks, exposed assets, and attack paths.
- Develop cloud security policies, baselines, dashboards, and risk-prioritization processes.
- Work with Cloud, DevOps, Infrastructure, and Application teams to drive remediation.
- Support cloud security architecture, threat modeling, and security-by-design initiatives.

AWS & Cloud Security

- Implement and maintain security controls across AWS environments.
- Secure AWS services including IAM, EC2, S3, VPC, RDS, Lambda, EKS, KMS, CloudTrail, and CloudWatch.
- Assess IAM permissions, network security, encryption, logging, monitoring, and workload security.
- Support vulnerability management and cloud security risk remediation.

SSPM & SaaS Security

- Monitor and manage SSPM capabilities for enterprise SaaS applications.
- Identify SaaS misconfigurations, excessive permissions, risky integrations, OAuth/API risks, and identity-related issues.
- Work with application and business teams to remediate SaaS security findings.

CrowdStrike & Threat Detection

- Support CrowdStrike Falcon administration, monitoring, and investigation.
- Analyze endpoint and cloud workload alerts, IOCs, suspicious activity, and potential threats.




- Collaborate with SOC and Incident Response teams on security investigations and remediation.

Application Security

- Support application security scanning using Veracode SAST and DAST.
- Analyze and prioritize application vulnerabilities and coordinate remediation with development teams.
- Manage and support Nexus IQ for open-source/software composition security and vulnerability management.
- Integrate application security findings into overall vulnerability and risk management processes.

Security Engineering & Automation

- Develop and improve security policies, procedures, playbooks, and operational processes.
- Automate security assessments, reporting, and remediation activities where appropriate.
- Continuously improve cloud, application, and workload security capabilities.

Required Skills & Experience

- Wiz / CNAPP
- Cloud Security Posture Management (CSPM)
- SaaS Security Posture Management (SSPM)
- CrowdStrike Falcon / EDR/XDR
- AWS Cloud Security
- Enterprise Cloud Security architecture
- Cloud IAM, least privilege, workload and container security
- Cloud vulnerability management and risk prioritization
- Veracode SAST and DAST
- Nexus IQ / Software Composition Analysis (SCA)
- Cloud logging, monitoring, threat detection, and security analytics
- Experience identifying and remediating cloud misconfigurations and security vulnerabilities

Qualifications

- Bachelor’s degree in computer science, Cybersecurity, Information Security, or related field.
- 5–8+ years of cybersecurity/cloud security experience, depending on seniority.
- Relevant certifications such as AWS Security Specialty, CCSP, CISSP, Security+, CrowdStrike, Wiz, or cloud security certifications are desirable.

Key Competencies

- Strong analytical and problem-solving skills.
- Strong understanding of Wiz, CSPM, SSPM, CrowdStrike, AWS, Cloud Security, Veracode, and Nexus IQ.
- Ability to prioritize security risks based on business impact and exposure.
- Strong collaboration skills with Cloud, DevOps, Application, Infrastructure, SOC, IAM, and Security teams.
- Strong communication and documentation skills.
- Ability to operate effectively in a fast-paced enterprise security environment.

📌 Senior Application Security Engineer (Guadalajara)
🏢 THOUGHT BYTE
📍 Guadalajara