Application Security Engineer: Shift-Left Leader (Hybrid)

Bain & Company; Ciudad de México; Híbrido; MXN 420.000 - 640.000; Jornada completa

Descripción de la vacante

Bain & Company is seeking an Application Security Engineer in Mexico City to strengthen our shift-left security program across global development teams. You will own scanning capabilities, integrate security into CI/CD, and translate security risks into actionable guidance for developers.

The role emphasizes collaboration with engineering teams, building security dashboards, and fostering secure development practices within a hybrid work model.

Formación

• Undergraduate degree or equivalent relevant work experience.
• 2–4 years of experience in Application Security, DevSecOps, or related role.
• Experience with SAST, SCA, secret scanning, and IaC scanning.
• Understanding OWASP Top 10, CVEs, and dependency risks.
• Experience supporting CI/CD pipelines (GitHub Actions, GitLab CI, or Jenkins).
• Ability to communicate security risks clearly to technical and non-technical stakeholders.

Responsabilidades

• Own and operate application security scanning capabilities (SAST, SCA, secret scanning, IaC).
• Lead deployment and adoption of Wiz Code across teams and CI/CD.
• Define and maintain secure coding standards and policy-as-code.
• Integrate security scanning into IDEs, PRs, and CI/CD pipelines.
• Configure and optimize scanning rules to reduce false positives.
• Develop dashboards and reporting for security posture and remediation progress.
• Build automation for vulnerability triage and remediation workflows.
• Partner with development teams to address security issues and drive remediation.

Conocimientos

CI/CD integration

Security risk communication

DevSecOps experience

Python / Bash scripting

Educación

Bachelor's degree or equivalent in CS or related field

Herramientas

GitHub Actions

GitLab CI

Jenkins

Wiz Code

Snyk / Checkmarx / Veracode

Descripción del empleo

Bain & Company is seeking an Application Security Engineer in Mexico City to strengthen our shift-left security program across global development teams. You will own scanning capabilities, integrate security into CI/CD, and translate security risks into actionable guidance for developers.

The role emphasizes collaboration with engineering teams, building security dashboards, and fostering secure development practices within a hybrid work model.