Mid-Level Security Engineer

AspenView Technology Partners; Medellín; Presencial; COP 60.000.000 - 120.000.000; Jornada completa

Descripción de la vacante

AspenView Technology Partners is seeking a Mid-Level Security Engineer to design, implement, and refine security measures across our infrastructure. You will work with developers, IT, and leadership to embed security as a core part of our product and culture, reducing risk and enabling fast, safe delivery.

You will monitor security alerts, conduct assessments, and collaborate with DevOps to secure CI/CD pipelines.

Formación

• 3–5 years of hands-on cybersecurity experience.
• Experience participating in incident response and post-incident reviews.
• Ability to balance security needs with business priorities.
• Strong knowledge of network security, IAM, and endpoint protection.
• Hands-on cloud security across AWS, Azure, or GCP environments.
• Familiarity with SOC 2, ISO 27001, and NIST frameworks.

Responsabilidades

• Monitor, investigate, and respond to security alerts using SIEM tools.
• Conduct vulnerability assessments and penetration testing; remediate findings.
• Implement and maintain security controls across cloud environments (AWS/Azure/GCP).
• Develop and enforce security policies, standards, and best practices.
• Participate in incident response, including root cause analysis.
• Collaborate with DevOps to integrate security into CI/CD pipelines.
• Stay ahead of threats by researching new attack vectors and countermeasures.

Conocimientos

Incident response

Security engineering

Communication

Problem solving

Security mindset

Herramientas

Splunk

Sentinel

Snyk

Checkmarx

Vulnerability scanning tools

Descripción del empleo

About the role

As a Mid-Level Security Engineer, you’ll be at the heart of our defense strategy—designing, implementing, and refining security measures that keep our infrastructure safe and our customers confident. You’ll work closely with developers, IT, and leadership to ensure security is not an afterthought but a core part of our product and culture. Your work will directly reduce risk, strengthen compliance, and enable the business to move faster without compromising safety. Security isn’t just a department here; it’s woven into every decision we make—from safeguarding sensitive information to building resilient systems—because we believe proactive, thoughtful security empowers innovation rather than slowing it down.

What you will do:

• Monitor, investigate, and respond to security alerts using tools like Splunk, CrowdStrike, or Sentinel.
• Conduct vulnerability assessments and penetration testing, then partner with engineering teams to remediate findings.
• Implement and maintain security controls across cloud environments (AWS, Azure, or GCP).
• Develop and enforce security policies, standards, and best practices for the organization.
• Participate in incident response, including root cause analysis and post-incident reviews.
• Collaborate with DevOps to integrate security into CI/CD pipelines (e.g., Snyk, Checkmarx).
• Stay ahead of emerging threats by researching new attack vectors and recommending countermeasures.

What you bring:

Experience

• 3–5 years of hands‑on experience in cybersecurity, security engineering, or a related role.
• Experience participating in incident response, including root cause analysis and post-incident reviews.
• Proven ability to balance security needs with business priorities through a problem‑solving mindset.

Technical Expertise

• Strong knowledge of network security, identity and access management, and endpoint protection.
• Experience with SIEM platforms (e.g., Splunk, Sentinel), intrusion detection/prevention systems, and vulnerability scanning tools.
• Hands‑on experience with cloud security across AWS, Azure, or GCP environments.
• Familiarity with integrating security tooling into CI/CD pipelines (e.g., Snyk, Checkmarx).
• Excellent communication skills—able to explain complex security concepts to both technical and non-technical audiences.
• Familiarity with compliance frameworks (e.g., SOC 2, ISO 27001, NIST).

Nice if you have:

• Industry certifications such as CompTIA Security+, CEH, CISSP (Associate), AWS/Azure/GCP Security specialty, or equivalent are a plus.

Visa Sponsorship:

AspenView does not sponsor employment visas for this role. Applicants must be currently authorized to work in the country from where they’re applying on a permanent basis without the need for visa sponsorship now or in the future.

Equal Opportunity Employer:

AspenView is proud to be an equal opportunity employer. We believe in creating an environment where all employees feel welcome, valued, and empowered to succeed. We celebrate diversity and strive to build a culture of inclusion where all individuals, regardless of their race, color, gender, gender identity or expression, sexual orientation, disability, age, or any other characteristic, can thrive. We encourage applicants from all walks of life to join our team and make a lasting impact.