Application Security Engineer: Shift-Left & DevSecOps Leader

Bain & Company; Ciudad de México; Híbrido; MXN 420.000 - 640.000; Jornada completa

Descripción de la vacante

Bain & Company in Mexico City is seeking an Application Security Engineer to scale our shift-left security program by leading our code scanning capabilities and supporting the adoption of AI-enabled static code analysis across our global development teams.

This is a highly collaborative, technical role where you will work alongside engineering teams to integrate security into the software development lifecycle, translate security risks into developer guidance, drive remediation in CI/CD

Formación

• Experience with SAST, SCA, secret scanning, and IaC scanning.
• Understanding of OWASP Top 10, CVEs, and software dependency risks.
• Experience supporting CI/CD pipelines such as GitHub Actions, GitLab CI, or Jenkins.
• Ability to communicate security risks clearly with both technical and non-technical stakeholders.
• 2–4 years of experience in Application Security, DevSecOps, or related security/engineering role.

Responsabilidades

• Own and operate application security scanning capabilities including SAST, SCA, secret detection, and IaC scanning.
• Lead deployment and adoption of Wiz Code across development teams and CI/CD pipelines.
• Define and maintain secure coding standards and policy-as-code practices.
• Integrate security scanning into IDEs, pull requests, and CI/CD pipelines.
• Configure and optimize scanning rules to improve detection quality and reduce false positives.
• Develop dashboards and reporting to measure security posture and remediation progress.
• Build automation that streamlines vulnerability triage and remediation workflows.
• Serve as a trusted security partner for development teams.

Conocimientos

SAST

SCA

IaC scanning

CI/CD integration

Developer guidance

Python/Bash scripting

Educación

Undergraduate degree

Herramientas

Wiz Code

Snyk

Semgrep

Checkmarx

Veracode

Terraform

CloudFormation

AWS

Azure

GCP

Descripción del empleo

Bain & Company in Mexico City is seeking an Application Security Engineer to scale our shift-left security program by leading our code scanning capabilities and supporting the adoption of AI-enabled static code analysis across our global development teams.

This is a highly collaborative, technical role where you will work alongside engineering teams to integrate security into the software development lifecycle, translate security risks into developer guidance, drive remediation in CI/CD