22 oct
|
Bloom Digitals
|
Ciudad de México
22 oct
Bloom Digitals
Ciudad de México
This position is a Junior Security Engineer role operating within CLOUDSUFI's live engagement, where AI is actively embedded across reliability and security operations. The team utilizes an AI co-pilot, specialized AI security sub-agents, and a formal AI governance program that assesses internal AI agents for risk. You will work under the guidance of senior engineers and architects to support, operate, and learn from this AI-driven program.
About the roleThis position is a Junior Security Engineer role operating within CLOUDSUFI's live engagement, where AI is actively embedded across reliability and security operations. The team utilizes an AI co-pilot, specialized AI security sub-agents, and a formal AI governance program that assesses internal AI agents for risk. You will work under the guidance of senior engineers and architects to support, operate, and learn from this AI-driven program.
Key Responsibilities
Incident Response:
Support incident response activities by using AI-driven detection, correlation, and root-cause analysis tools to accelerate triage under senior guidance.
Sub-Agent Monitoring:
Help operate and monitor existing AI security sub-agents related to vulnerability scanning, threat intelligence, and vendor risk, ensuring anomalies are flagged for senior review.
Vulnerability Prioritization:
Assist in triaging vulnerability scan results using risk-based prioritization supported by intelligent tooling, such as SAST/SCA, EASM, and container scanning.
Threat Detection & WAF:
Support cloud security posture reviews using predictive analytics and help monitor and tune WAF policies using behavioral analytics and anomaly detection.
AI Governance & Risk:
Participate in architecture and design reviews using automated threat modeling tools to learn how AI-agent risks, such as prompt injection and secrets exposure, are assessed and documented.
DevSecOps Integration:
Support the implementation of security controls within CI/CD pipelines,
learning automation-first approaches and helping integrate basic AI-assisted checks like secret-scanning.
Workflow Support:
Support concurrent security initiatives using AI-enabled workflow tools and help promote a data-driven, security-first culture.
Key Requirements
English:
Professional proficiency in verbal and written English communication.
Experience:
+5 years of experience in cloud security.
Core Security Knowledge:
Foundational knowledge of container, application, and cloud security concepts, alongside a basic understanding of API and web/mobile application security testing.
AppSec Testing:
Exposure to static and dynamic application security testing tools, including basic code analysis.
Scripting & Automation:
Hands-on exposure to security automation or scripting languages such as Python, Bash, or similar.
Infrastructure & CI/CD:
Beginner-to-intermediate familiarity with Infrastructure as Code tools like Terraform, Ansible, or CloudFormation, and exposure to CI/CD pipelines.
Compliance Awareness:
Familiarity with common compliance frameworks including PCI-DSS, SOC 2, SOX, and HIPAA.
Competencies:
Working knowledge of Threat Detection and Response, SIEM, Vulnerability Management, Identity Security, DevSecOps, and Cloud Security fundamentals.
Desired skills
Certifications:
CompTIA Security+ or an equivalent entry-level certification, with an AWS Cloud Practitioner or Associate-level cloud security certification preferred.
AI/ML Exposure:
Exposure to AI/ML applications in cybersecurity is considered a plus.
Mindset:
Strong curiosity and eagerness toward AI-first and automation-first security practices, with a proactive, self-driven learning attitude.
Willingness to Learn:
Eagerness to build deeper expertise in infrastructure as code, intelligent assistants, AI-driven decision systems, predictive analytics, and adaptive WAF rule tuning.
Specialized Tags:
Expertise or interest in AI Engineering, Agentic AI, DEVSECOPS, and INFOSEC.
Working conditions
Location:
Guadalajara, Mexico.
Work Arrangement:
100% Onsite.
Schedule:
Monday to Friday.
#J-18808-Ljbffr
📌 Cloud and AI Security Engineer (Ciudad de México)
🏢 Bloom Digitals
📍 Ciudad de México