About the roleThis position is a Junior Security Engineer role operating within CLOUDSUFI's live engagement, where AI is actively embedded across reliability and security operations. The team utilizes an AI co-pilot, specialized AI security sub-agents, and a formal AI governance program that assesses internal AI agents for risk. You will work under the guidance of senior engineers and architects to support, operate, and learn from this AI-driven program.

Key Responsibilities

- Incident Response: Support incident response activities by using AI-driven detection, correlation, and root-cause analysis tools to accelerate triage under senior guidance.
- Sub-Agent Monitoring: Help operate and monitor existing AI security sub-agents related to vulnerability scanning, threat intelligence, and vendor risk, ensuring anomalies are flagged for senior review.
- Vulnerability Prioritization: Assist in triaging vulnerability scan results using risk-based prioritization supported by intelligent tooling, such as SAST/SCA, EASM, and container scanning.
- Threat Detection & WAF: Support cloud security posture reviews using predictive analytics and help monitor and tune WAF policies using behavioral analytics and anomaly detection.
- AI Governance & Risk: Participate in architecture and design reviews using automated threat modeling tools to learn how AI-agent risks, such as prompt injection and secrets exposure, are assessed and documented.
- DevSecOps Integration: Support the implementation of security controls within CI/CD pipelines, learning automation-first approaches and helping integrate basic AI-assisted checks like secret-scanning.
- Workflow Support: Support concurrent security initiatives using AI-enabled workflow tools and help promote a data-driven, security-first culture.

Key Requirements

- English:



Professional proficiency in verbal and written English communication.
- Experience: +5 years of experience in cloud security.
- Core Security Knowledge: Foundational knowledge of container, application, and cloud security concepts, alongside a basic understanding of API and web/mobile application security testing.
- AppSec Testing: Exposure to static and dynamic application security testing tools, including basic code analysis.
- Scripting & Automation: Hands-on exposure to security automation or scripting languages such as Python, Bash, or similar.
- Infrastructure & CI/CD: Beginner-to-intermediate familiarity with Infrastructure as Code tools like Terraform, Ansible, or CloudFormation, and exposure to CI/CD pipelines.
- Compliance Awareness: Familiarity with common compliance frameworks including PCI-DSS, SOC 2, SOX, and HIPAA.
- Competencies: Working knowledge of Threat Detection and Response, SIEM, Vulnerability Management, Identity Security, DevSecOps, and Cloud Security fundamentals.

Desired skills

- Certifications: CompTIA Security+ or an equivalent entry-level certification, with an AWS Cloud Practitioner or Associate-level cloud security certification preferred.
- AI/ML Exposure: Exposure to AI/ML applications in cybersecurity is considered a plus.
- Mindset: Strong curiosity and eagerness toward AI-first and automation-first security practices, with a proactive, self-driven learning attitude.
- Willingness to Learn: Eagerness to build deeper expertise in infrastructure as code, intelligent assistants, AI-driven decision systems, predictive analytics, and adaptive WAF rule tuning.
- Specialized Tags: Expertise or interest in AI Engineering, Agentic AI, DEVSECOPS, and INFOSEC.

Working conditions

- Location: Guadalajara, Mexico.
- Work Arrangement: 100% Onsite.
- Schedule: Monday to Friday.

📌 Cloud and AI Security Engineer (Aguascalientes)
🏢 Bloom Digitals
📍 Aguascalientes