Application Security Engineer Bogotá, Colombia

Ttec; Bogotá; Remote; COP 90,000,000 - 130,000,000; Full time

Job summary

TTEC is seeking an Application Security Engineer to help protect critical systems by integrating security into the SDLC. This remote role in Colombia collaborates with development teams to embed secure coding practices and perform risk assessments across web, mobile, cloud, and on‑prem applications.

You will lead security assessments, code reviews, remediation efforts, and threat modeling, while staying current with emerging threats.

Qualifications

• Bachelor's degree in Computer Science or related field.
• 3+ years of experience in application security (cloud and on-prem).
• Experience with penetration testing, risk assessments, and vulnerability management.
• Solid understanding of OWASP Top 10 and mitigation strategies.
• Proficiency in scripting or programming (Python, Java, or C#).
• Familiarity with security testing tools and cloud platforms (AWS, Azure, GCP).
• Excellent communication skills with global and cross-functional collaboration experience.
• Certifications such as CISSP, CSSLP, or CEH are a plus.

Responsibilities

• Lead security assessments and code reviews across web, mobile, cloud, and on-prem applications.
• Guide development teams on secure coding practices and implement effective security controls.
• Evaluate threats, conduct risk assessments, and define mitigation strategies.
• Maintain documentation on architecture, incident response, and security procedures.
• Stay current on emerging threats and support incident response efforts when needed.
• Conduct vulnerability scans, penetration testing, and manage remediation processes.
• Use tools like SAST, DAST, and IAST to continuously monitor application security.
• Collaborate with DevOps to embed security in CI/CD pipelines.
• Deliver security training to developers and internal teams.
• Participate in cloud security reviews (AWS, Azure, GCP) and recommend improvements.
• Provide guidance on automation opportunities using Python, Java, or C#.
• Serve as a security advisor across global business units and support planning of key security initiatives.
• Clearly communicate findings to both technical and non-technical stakeholders across cultures.

Skills

Penetration testing

Vulnerability management

OWASP Top 10

Python

Java

C#

Cloud platforms

Security testing tools

Communication skills

Security certifications

Education

Bachelor's degree in Computer Science or related field

Tools

SAST

DAST

IAST

CI/CD tooling

Job description

Application Security Engineer

Be the spark that brightens days and ignite your career with TTEC’s award-winning employment experience. As an Application Security Engineer working remotely in Colombia, you’ll be a part of creating and delivering amazing customer experiences while you also #experienceTTEC, an award-winning employment experience and company culture.

What You’ll be Doing

Looking to use your expertise to protect and strengthen mission-critical systems and applications? In this role, you’ll lead efforts to secure new and existing applications by assessing risks, developing mitigation strategies, and embedding security best practices throughout the SDLC.

You will:

• Lead security assessments and code reviews across web, mobile, cloud, and on-prem applications.
• Guide development teams on secure coding practices and implement effective security controls.
• Evaluate threats, conduct risk assessments, and define mitigation strategies.
• Maintain documentation on architecture, incident response, and security procedures.
• Stay current on emerging threats and support incident response efforts when needed.

You’ll report to the Executive Director of Information Security and contribute to safeguarding our clients and enterprise data.

During a Typical Day, You’ll

• Conduct vulnerability scans, penetration testing, and manage remediation processes.
• Use tools like SAST, DAST, and IAST to continuously monitor application security.
• Collaborate with DevOps to embed security in CI/CD pipelines.
• Deliver security training to developers and internal teams.
• Participate in cloud security reviews (AWS, Azure, GCP) and recommend improvements.
• Provide guidance on automation opportunities using Python, Java, or C#.
• Serve as a security advisor across global business units and support planning of key security initiatives.
• Clearly communicate findings to both technical and non-technical stakeholders across cultures.

What You Bring to the Role

• Bachelor's degree in Computer Science, Information Security, or related field.
• 3+ years of experience in application security (cloud and on-premise).
• Experience with penetration testing, risk assessments, and vulnerability management.
• Solid understanding of OWASP Top 10 and mitigation strategies.
• Proficiency in scripting or programming (Python, Java, or C#).
• Familiarity with security testing tools and cloud platforms (AWS, Azure, GCP).
• Excellent communication skills with global and cross-functional collaboration experience.
• Certifications such as CISSP, CSSLP, or CEH are a plus.

What You Can Expect

• Supportive of your career and professional development
• An inclusive culture and community minded organization where giving back is encouraged
• A global team of curious lifelong learners guided by our company values
• Ask us about our paid time off (PTO) and wellness and healthcare benefits
• And yes... a great compensation package and performance bonus opportunities, benefits you'd expect and maybe a few that would pleasantly surprise you (like tuition reimbursement)