Senior Security Engineer

Lean Solutions Group; Medellín; Remote; COP 286,615,000 - 414,000,000; Full time

Job summary

Global Technology Services in Medellín, Colombia, seeks a Senior Security Engineer to bolster cloud and application security within a large AWS modernization program. You will review IAM, Cognito, OAuth/OIDC/JWT and collaborate with engineers to implement secure access controls.

Responsibilities include assessing security risks, guiding remediation across infra and apps, and documenting controls and decisions. Strong English communication is required.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or related field, or equivalent practical experience.
• Practical experience in cloud security or application security, with exposure to AWS.
• Experience implementing IAM controls and applying least privilege principles.
• Understanding of authentication and authorization, including OAuth, OIDC, and JWT.
• Experience reviewing API security, application vulnerabilities, and secure configuration.
• Ability to assess security findings and collaborate with engineers on remediation.
• Understanding of secure development practices, secrets management, and security logging.
• Professional proficiency in English, both written and spoken.

Responsibilities

• Review AWS and application security configurations, implement appropriate access controls, and support authentication and authorization flows.
• Assess security risks, investigate findings, and support remediation across infrastructure and application components.
• Help incorporate security checks into delivery workflows and document security decisions, controls, and validation results.

Skills

Bachelor's degree (CS/IS/Engineering)

Cloud security

AWS

IAM controls

OAuth/OIDC/JWT

API security

Remediation collaboration

Secure development practices

English proficiency

Education

Bachelor’s degree in Computer Science, Information Systems, Engineering, or related field

Tools

Amazon Cognito

GitLab CI/CD

API Gateway

Lambda

Job description

Company Overview: Global Technology Services is a rapidly expanding organization situated in Medellín, Colombia. We pride ourselves on possessing one of the most influential networks within software development and IT services for the entertainment, financial, and logistics sectors. Our corporate projections offer many opportunities for professionals to elevate their careers and experience substantial growth. Joining our team means engaging with expansive engineering teams across Latin America and the United States, contributing to cutting-edge developments in multiple industries.

We’re looking for a Security Engineer to support cloud and application security within a large scale AWS modernization program. This role focuses on identity, access controls, secure application integrations, and the remediation of security weaknesses.

Position Title: Security Engineer

Category: Security

Seniority: Senior

Location: Colombia and Mexico

What you will be doing:

You will review AWS and application security configurations, implement appropriate access controls, and support authentication and authorization flows. You will work with engineering teams on IAM, Cognito, OAuth, OIDC, and JWT within API and application integrations.

You will assess security risks, investigate findings, and support remediation across infrastructure and application components. You will help incorporate security checks into delivery workflows and document security decisions, controls, and validation results.

Required Skills & Experience

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related field, or equivalent practical experience.
• Practical experience in cloud security or application security, with exposure to AWS.
• Experience implementing IAM controls and applying least privilege principles.
• Understanding of authentication and authorization, including OAuth, OIDC, and JWT.
• Experience reviewing API security, application vulnerabilities, and secure configuration.
• Ability to assess security findings and collaborate with engineers on remediation.
• Understanding of secure development practices, secrets management, and security logging.
• Professional proficiency in English, both written and spoken.

Nice to Have Skills

• Experience with Amazon Cognito and security controls for Lambda or API Gateway.
• Experience integrating security scanning into GitLab CI/CD.
• Experience with threat modeling, vulnerability testing, or an AWS security certification.

Soft Skills

• Ability to explain security risks and practical remediation steps to engineering teams.
• Sound judgment when prioritizing findings and assessing their impact.
• Attention to detail and clear documentation of controls and decisions.