17 oct
|
Agileengine
|
Heroica Puebla de Zaragoza
17 oct
Agileengine
Heroica Puebla de Zaragoza
Puebla (Heroica Puebla), Mexico | Posted on 10/12/2026 WHY JOIN US If you're looking for a place to grow, make an impact, and work with people who care, we'd love to meet you! ABOUT THE ROLE We are looking for a Python Application Security Engineer to automate security controls and integrate application and cloud security checks into software development workflows. The mandatory requirements are 3+ years in software engineering and security, Python, Wiz or similar CSPM tools, Ia C/Terraform deploy-time checks, runtime security checks, and independent execution; upper-intermediate English is required. SAST/DAST/SCA, AI security, threat modeling, and Java are a plus. MUST HAVES - 3+ years of experience combining software engineering experience, security implementation and/or architecture experience. - Strong coding and architectural proficiency in Python (for security automation and scripting). - Hands-on experience or familiarity with Wiz, Prisma Cloud, or similar tools for cloud security posture management and threat detection. - Implementation experience with deploy-time checks against Infrastructure as Code (Ia C) / Terraform. - Implementation experience with runtime checks through Cloud Security Posture Management (CSPM). - Fully autonomous execution capability , requiring no daily supervision to map out and build automated security runbooks. NICE TO HAVES - Deep, hands‑on expertise deploying and tuning modern application security testing tools (SAST, DAST, SCA) and integrating them into complex CI/CD orchestration ecosystems.
- Experience integrating LLMs, AI agents, or automated coding assistants to streamline vulnerability triaging or secure code generation. - Advanced application threat modeling experience. - Ability to confidently read, review, and secure enterprise source Java code. WHAT YOU WILL DO - App Sec Engineering & Automation: Engineer and deploy AI-enabled secure code scanning capabilities and "Golden Images" to drive secure-from-the-start adoption. - Technical Modernization: Automate the development of secure coding patterns and integrate them with traditional and Agentic SDLC workflows. - Security Tooling Integration: Architect the integration of continuous security scanning tools (SAST, DAST, SCA) into enterprise CI/CD pipelines, tuning them to eliminate noise. - Cloud & Runtime Security: Implement runtime security checks via CSPM to maintain continuous cloud visibility and threat posture management. - Developer Experience (Dev Ex): Act as a senior technical SME, reading and reviewing complex application code (Java/Python) to provide software engineers with highly specific, code-level remediation guidance. PERKS AND BENEFITS - Professional growth : Mentorship, Tech Talks, and personalized growth roadmaps. - Competitive compensation : USD-based pay with education, fitness, and team activity budgets. - Exciting projects : Modern solutions with Fortune 500 and top product companies. - Flextime : Adaptable schedule with remote and office options. #J-18808-Ljbffr
📌 Python engineer (appsec) id70123 (Heroica Puebla de Zaragoza)
🏢 Agileengine
📍 Heroica Puebla de Zaragoza