Role: Senior Application Security Engineer Duration: Long-Term Contract Job Summary We are seeking an experienced Cloud Security & CNAPP Engineer / Analyst with strong hands-on expertise in Wiz, CSPM, SSPM, Crowd Strike, AWS, Cloud Security, Veracode SAST/DAST, and Nexus IQ. The candidate will be responsible for identifying, assessing, prioritizing, and remediating security risks across cloud, Saa S, application, and workload environments. The role will focus on improving cloud security posture, vulnerability management, application security, threat detection, and security engineering capabilities. Key Responsibilities Cloud Security & CNAPP Manage and monitor Wiz/CNAPP and CSPM capabilities across AWS and cloud environments. Identify and prioritize cloud misconfigurations, vulnerabilities, identity risks, exposed assets, and attack paths. Develop cloud security policies, baselines, dashboards, and risk-prioritization processes. Work with Cloud, Dev Ops, Infrastructure, and Application teams to drive remediation. Support cloud security architecture, threat modeling, and security-by-design initiatives. Implement and maintain security controls across AWS environments. Secure AWS services including IAM, EC2, S3, VPC, RDS, Lambda, EKS, KMS, Cloud Trail, and Cloud Watch. Assess IAM permissions, network security, encryption, logging, monitoring, and workload security. Support vulnerability management and cloud security risk remediation. SSPM & Saa S Security Monitor and manage SSPM capabilities for enterprise Saa S applications. Identify Saa S misconfigurations, excessive permissions, risky integrations, OAuth/API risks, and identity-related issues. Work with application and business teams to remediate Saa S security findings. Support Crowd Strike Falcon administration, monitoring, and investigation. Analyze endpoint and cloud workload alerts, IOCs, suspicious activity, and potential threats.



Collaborate with SOC and Incident Response teams on security investigations and remediation. Application Security Support application security scanning using Veracode SAST and DAST. Analyze and prioritize application vulnerabilities and coordinate remediation with development teams. Manage and support Nexus IQ for open-source/software composition security and vulnerability management. Integrate application security findings into overall vulnerability and risk management processes. Security Engineering & Automation Develop and improve security policies, procedures, playbooks, and operational processes. Automate security assessments, reporting, and remediation activities where appropriate. Continuously improve cloud, application, and workload security capabilities. Required Skills & Experience Cloud Security Posture Management (CSPM) Saa S Security Posture Management (SSPM) Enterprise Cloud Security architecture Cloud IAM, least privilege, workload and container security Cloud vulnerability management and risk prioritization Veracode SAST and DAST Nexus IQ / Software Composition Analysis (SCA) Cloud logging, monitoring, threat detection, and security analytics Experience identifying and remediating cloud misconfigurations and security vulnerabilities Qualifications Bachelor’s degree in computer science, Cybersecurity, Information Security, or related field. 5–8+ years of cybersecurity/cloud security experience, depending on seniority. Relevant certifications such as AWS Security Specialty, CCSP, CISSP, Security+, Crowd Strike, Wiz, or cloud security certifications are desirable. Strong analytical and problem-solving skills. Strong understanding of Wiz, CSPM, SSPM, Crowd Strike, AWS, Cloud Security, Veracode, and Nexus IQ. Ability to prioritize security risks based on business impact and exposure. Strong collaboration skills with Cloud, Dev Ops, Application, Infrastructure, SOC, IAM, and Security teams. Strong communication and documentation skills. Ability to operate effectively in a fast-paced enterprise security environment. #J-18808-Ljbffr

📌 Senior application security engineer (Guadalajara)
🏢 THOUGHT BYTE
📍 Guadalajara