Senior Application Security Engineer

Moon Bridge; Medellín; On-site; COP 287,825,000 - 415,747,000; Full time

Job summary

Moon Bridge in Medellín is seeking a Senior Cloud & Application Security Engineer to join a growing security team supporting a US-based technology services company.

You will identify, prioritize and fix security risks across cloud, SaaS, and application environments, collaborating with US cloud, DevOps and engineering teams to strengthen the security posture.

Qualifications

• 6+ years of cybersecurity experience with a focus on cloud security.
• Hands-on experience with Wiz or CNAPP platforms.
• CSPM and SSPM experience.
• CrowdStrike Falcon or similar EDR/XDR experience.
• Strong AWS security expertise and enterprise cloud security knowledge.
• Professional English for daily collaboration with US-based teams.

Responsibilities

• Manage and monitor CSPM across AWS, prioritizing misconfigurations and risks.
• Monitor SSPM posture and identify risky permissions and exposures.
• Support CrowdStrike Falcon and investigate alerts with SOC.
• Implement and maintain security controls across AWS services.
• Prioritize vulnerabilities and drive remediation with cross-functional teams.
• Coordinate fixes with developers during application security scanning.
• Build security policies, dashboards, and automation to improve the program.

Skills

Cloud security

CNAPP/Wiz

CSPM/SSPM

EDR/XDR (CrowdStrike)

AWS security

IAM/least privilege

Professional English

Tools

Wiz CNAPP

Veracode SAST/DAST

Nexus IQ

Job description

Job title: Senior Cloud & Application Security Engineer

Employment type: Full-time

About the role

Moon Bridge is hiring a Senior Cloud & Application Security Engineer in Medellín to join a growing security team supporting a US-based technology services company. You’ll identify, prioritize and fix security risks across cloud, SaaS and application environments, working directly with US-based cloud, DevOps and engineering teams.

What you’ll do

• Manage and monitor Wiz/CNAPP and cloud security posture (CSPM) across AWS, prioritizing misconfigurations, identity risks, exposed assets and attack paths
• Monitor SaaS security posture (SSPM), finding risky permissions, integrations and OAuth/API exposures
• Support CrowdStrike Falcon administration and investigate endpoint and cloud workload alerts with the SOC
• Implement and maintain security controls across AWS (IAM, EC2, S3, VPC, EKS, KMS, CloudTrail and others)
• Prioritize vulnerabilities by business risk and drive remediation with cloud, DevOps and application teams
• Support application security scanning (Veracode SAST/DAST, Nexus IQ) and coordinate fixes with developers
• Build security policies, dashboards and automation to keep improving the program

What you bring

• 6+ years of cybersecurity experience, with a strong focus on cloud security
• Hands-on experience with Wiz or another CNAPP platform (Wiz strongly preferred)
• Cloud Security Posture Management (CSPM) and SaaS Security Posture Management (SSPM) experience
• CrowdStrike Falcon or similar EDR/XDR experience
• Strong AWS security expertise and enterprise cloud security architecture knowledge
• Cloud IAM, least privilege, and workload/container security
• Professional English for daily work with US-based teams

Nice to have

• Veracode SAST/DAST experience
• Nexus IQ or other Software Composition Analysis (SCA) tools
• Cloud logging, monitoring and security analytics
• Certifications such as AWS Certified Security - Specialty, CCSP, CISSP or Security+
• Work on enterprise-scale security programs with US-based teams
• Join early, as part of a new team being built in Medellín
• Full-time employment with all benefits required by Colombian law