Role: Senior Application Security EngineerDuration: Long-Term ContractJob SummaryWe are seeking an experienced Cloud Security & CNAPP Engineer / Analyst with strong hands-on expertise in Wiz, CSPM, SSPM, CrowdStrike, AWS, Cloud Security, Veracode SAST/DAST, and Nexus IQ.The candidate will be responsible for identifying, assessing, prioritizing, and remediating security risks across cloud, SaaS, application, and workload environments.
The role will focus on improving cloud security posture, vulnerability management, application security, threat detection, and security engineering capabilities.Key ResponsibilitiesCloud Security & CNAPPManage and monitor Wiz/CNAPP and CSPM capabilities across AWS and cloud environments.Identify and prioritize cloud misconfigurations, vulnerabilities, identity risks, exposed assets, and attack paths.Develop cloud security policies, baselines, dashboards, and risk-prioritization processes.Work with Cloud, DevOps, Infrastructure, and Application teams to drive remediation.Support cloud security architecture, threat modeling, and security-by-design initiatives.Implement and maintain security controls across AWS environments.Secure AWS services including IAM, EC2, S3, VPC, RDS, Lambda, EKS, KMS, CloudTrail, and CloudWatch.Assess IAM permissions, network security, encryption, logging, monitoring, and workload security.Support vulnerability management and cloud security risk remediation.SSPM & SaaS SecurityMonitor and manage SSPM capabilities for enterprise SaaS applications.Identify SaaS misconfigurations, excessive permissions, risky integrations, OAuth/API risks, and identity-related issues.Work with application and business teams to remediate SaaS security findings.Support CrowdStrike Falcon administration, monitoring, and investigation.Analyze endpoint and cloud workload alerts, IOCs, suspicious activity,



and potential threats.Collaborate with SOC and Incident Response teams on security investigations and remediation.Application SecuritySupport application security scanning using Veracode SAST and DAST.Analyze and prioritize application vulnerabilities and coordinate remediation with development teams.Manage and support Nexus IQ for open-source/software composition security and vulnerability management.Integrate application security findings into overall vulnerability and risk management processes.Security Engineering & AutomationDevelop and improve security policies, procedures, playbooks, and operational processes.Automate security assessments, reporting, and remediation activities where appropriate.Continuously improve cloud, application, and workload security capabilities.Required Skills & ExperienceCloud Security Posture Management (CSPM)SaaS Security Posture Management (SSPM)Enterprise Cloud Security architectureCloud IAM, least privilege, workload and container securityCloud vulnerability management and risk prioritizationVeracode SAST and DASTNexus IQ / Software Composition Analysis (SCA)Cloud logging, monitoring, threat detection, and security analyticsExperience identifying and remediating cloud misconfigurations and security vulnerabilitiesQualificationsBachelor's degree in computer science, Cybersecurity, Information Security, or related field.5–8+ years of cybersecurity/cloud security experience, depending on seniority.Relevant certifications such as AWS Security Specialty, CCSP, CISSP, Security+, CrowdStrike, Wiz, or cloud security certifications are desirable.Strong analytical and problem-solving skills.Strong understanding of Wiz, CSPM, SSPM, CrowdStrike, AWS, Cloud Security, Veracode, and Nexus IQ.Ability to prioritize security risks based on business impact and exposure.Strong collaboration skills with Cloud, DevOps, Application, Infrastructure, SOC, IAM, and Security teams.Strong communication and documentation skills.Ability to operate effectively in a fast-paced enterprise security environment.
#J-*****-Ljbffr

📌 Senior Application Security Engineer (Jalisco)
🏢 THOUGHT BYTE
📍 Jalisco