Application Security Engineer – Secure SDLC & Code Scanning

Bain & Company; Ciudad de México; Híbrido; MXN 420.000 - 700.000; Jornada completa

Descripción de la vacante

Bain & Company in Mexico City is seeking an Application Security Engineer to scale our shift-left security program by leading code scanning capabilities and supporting AI-enabled static code analysis across our global development teams.

This highly collaborative role partners with engineering to integrate security into the software development lifecycle, reduce vulnerabilities at code creation, and translate risks into practical guidance for developers while communicating progress to both

Formación

• Undergraduate degree or equivalent work experience.
• 2–4 years of experience in Application Security, DevSecOps, or related role.
• Experience with SAST, SCA, secret scanning, and IaC scanning.
• Understanding of OWASP Top 10, CVEs, and software dependency risks.
• Experience supporting CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins).
• Ability to communicate security risks clearly to technical and non-technical stakeholders.

Responsabilidades

• Own and operate application security scanning capabilities (SAST, SCA, secret detection, IaC).
• Lead deployment and adoption of Wiz Code across development teams and CI/CD pipelines.
• Define and maintain secure coding standards and policy-as-code practices.
• Integrate security scanning into IDEs, PR workflows, and CI/CD pipelines.
• Configure and optimize scanning rules to improve detection quality and reduce false positives.
• Develop dashboards and reporting to measure security posture and remediation progress.
• Build automation for vulnerability triage, ticket creation, and remediation workflows.
• Serve as a trusted security partner for development teams and resolve security issues.
• Evaluate emerging application security technologies and recommend tooling improvements.
• Develop documentation and onboarding materials for secure development practices.
• Monitor, triage, and prioritize findings; drive timely remediation of critical vulnerabilities.
• Identify recurring security patterns and implement long-term improvements.
• Support investigations, root cause analysis, and compliance activities.
• Provide clear communication on risks and program maturity.
• Advocate for security-by-design and shared responsibility.

Conocimientos

Security concepts knowledge

Clear communication

DevSecOps collaboration

Threat modeling

Educación

Undergraduate degree or equivalent

Herramientas

Wiz Code

Snyk

Semgrep

Checkmarx

Veracode

AWS

Azure

GCP

Terraform

CloudFormation

Python

Bash

Descripción del empleo

Bain & Company in Mexico City is seeking an Application Security Engineer to scale our shift-left security program by leading code scanning capabilities and supporting AI-enabled static code analysis across our global development teams.

This highly collaborative role partners with engineering to integrate security into the software development lifecycle, reduce vulnerabilities at code creation, and translate risks into practical guidance for developers while communicating progress to both