Senior Cloud Security Engineer, AWS & CSPM

Accelya Group; Bogotá; Hybride; COP 90 000 000 - 150 000 000; Plein temps

Résumé du poste

Accelya Group in Bogota, Colombia, is seeking a hands-on Cloud Security Engineer to own the remediation lifecycle across our AWS environment. You will fix code-level vulnerabilities, triage CSPM findings, and partner with engineering to close gaps quickly and durably.

This role is not policy-only; you will work in the console, pipelines, and IaC to implement fixes, runbooks, and robust security controls while collaborating with DevOps and platform teams. Fluency in English is required.

Qualifications

• 3+ years of hands-on cloud security with AWS.
• Direct experience remediating CSPM/CNAPP findings.
• Experience remediating SAST/SCA and container image issues.
• IaC experience with Terraform or CloudFormation.
• Python or Bash for automation and investigations.
• Familiar with incident response processes and cloud logs.
• Strong written and verbal communication skills.
• Fluent English.

Responsabilités

• Analyze vulnerabilities (SAST/SCA, dependencies, IaC misconfig) and remediate with development teams.
• Triage and drive remediation of CSPM findings across AWS accounts.
• Own remediation runbooks and ensure root-cause fixes.
• Collaborate with engineering to fix Terraform/CloudFormation, container images, and code.
• Improve detection/remediation workflows and automation.
• Support incident investigations and post-incident reviews.
• Participate in cloud security architecture reviews and risk-based recommendations.

Connaissances

AWS security

IAM

VPC

KMS

S3

CloudTrail

Security Hub

GuardDuty

Config

Inspector

CSPM/CNAPP remediation

SAST/SCA

Terraform

CloudFormation

Python

Bash

Incident response

Communication skills

English fluency

Outils

Terraform

CloudFormation

AWS security tooling

Scripting (Python/Bash)

Description du poste

Accelya Group in Bogota, Colombia, is seeking a hands-on Cloud Security Engineer to own the remediation lifecycle across our AWS environment. You will fix code-level vulnerabilities, triage CSPM findings, and partner with engineering to close gaps quickly and durably.

This role is not policy-only; you will work in the console, pipelines, and IaC to implement fixes, runbooks, and robust security controls while collaborating with DevOps and platform teams. Fluency in English is required.