Hands-On Cloud Security Engineer: CSPM Remediation

Accelya; Los Abades; Hybrid; COP 120,000,000 - 180,000,000; Full time

Job summary

Accelya is seeking a hands-on Cloud Security Engineer to own the remediation lifecycle across our AWS environment. You will actively fix vulnerabilities in code, infrastructure as code, and cloud configurations, collaborating with engineering and DevOps teams to close gaps quickly and durably.

You will serve as the security SME for tooling like Security Hub, GuardDuty, and CSPM platforms, with responsibilities spanning incident response, design reviews, and automation to improve remediation

Qualifications

• 3+ years of hands-on cloud security experience with deep AWS expertise (IAM, VPC, KMS, S3, CloudTrail, Security Hub, GuardDuty, Config, Inspector).
• Direct experience remediating CSPM/CNAPP findings (Upwind, Wiz, Prisma Cloud, Orca or similar).
• Experience analyzing and remediating application/code-level vulnerabilities (SAST, SCA, container image scanning).
• Working knowledge of IaC (Terraform and/or CloudFormation) and ability to remediate misconfigurations in code.
• Scripting in Python and/or Bash for automation and investigations.
• Familiarity with incident response processes and cloud-native log sources.
• Strong written and verbal communication; fluent English for interviews.

Responsibilities

• Analyze code for security vulnerabilities and remediate with development teams.
• Triage and drive remediation of Upwind CSPM findings across AWS accounts and services.
• Own remediation runbooks and close findings with root-cause fixes.
• Remediate issues in Terraform/CloudFormation, container images, and application code.
• Act as go-to SME for AWS security tooling (Security Hub, GuardDuty, Config, IAM).
• Improve detection/remediation workflows and build automation (Lambda, EventBridge, SSM Automation).
• Track posture metrics and report remediation velocity, aging findings, and risk trends.

Skills

AWS security

CSPM remediation

SAST/SCA remediation

Terraform/CloudFormation

Python/Bash scripting

Incident response

IAM/VPC security

English fluent

Tools

Security Hub

GuardDuty

Config

Inspector

Upwind

Wiz

Prisma Cloud

Orca

Terraform

CloudFormation

EKS

Kubernetes security

Job description

Accelya is seeking a hands-on Cloud Security Engineer to own the remediation lifecycle across our AWS environment. You will actively fix vulnerabilities in code, infrastructure as code, and cloud configurations, collaborating with engineering and DevOps teams to close gaps quickly and durably.

You will serve as the security SME for tooling like Security Hub, GuardDuty, and CSPM platforms, with responsibilities spanning incident response, design reviews, and automation to improve remediation