Cloud and AI Security Engineer

Bloom Digitals; Aguascalientes; On-site; MXN 320,000 - 520,000; Full time

Job summary

Bloom Digitals in Guadalajara, Mexico, is seeking a Junior Security Engineer to join CLOUDSUFI's live engagement where AI is integrated across reliability and security operations. You will work under senior engineers to support, operate, and learn from an AI-driven governance program that assesses internal AI agents for risk.

You will help with incident response, AI sub-agent monitoring, vulnerability triage, threat detection, and DevSecOps integration as part of a hands-on, onsite team.

Qualifications

• Professional proficiency in verbal and written English.
• 5+ years of experience in cloud security.
• Foundational knowledge of container, application, and cloud security concepts.
• Exposure to static and dynamic application security testing tools.
• Hands-on experience with security automation or scripting languages (Python, Bash).
• Familiarity with IaC tools (Terraform, Ansible, CloudFormation) and CI/CD pipelines.
• Awareness of PCI-DSS, SOC 2, SOX, HIPAA frameworks.
• Working knowledge of Threat Detection and Response, SIEM, Vulnerability Management, Identity Security, DevSecOps, and Cloud Security basics.

Responsibilities

• Incident Response: Support AI-driven detection and triage under senior guidance.
• Sub-Agent Monitoring: Operate AI security sub-agents for vulnerability scanning and threat intel.
• Vulnerability Prioritization: Triage scan results using risk-based methods and tooling.
• Threat Detection & WAF: Review cloud security posture and tune WAF policies.
• AI Governance & Risk: Participate in architecture reviews using automated threat modeling.
• DevSecOps Integration: Help implement security controls in CI/CD pipelines and automate checks.
• Workflow Support: Assist multiple security initiatives with AI-enabled tools.

Skills

English proficiency

Cloud security

Container security

AppSec testing

Automation scripting

CI/CD & IaC

Compliance awareness

Threat detection

Tools

Terraform

Ansible

CloudFormation

SAST/SCA

EASM

Container scanning

Job description

This position is a Junior Security Engineer role operating within CLOUDSUFI's live engagement, where AI is actively embedded across reliability and security operations. The team utilizes an AI co-pilot, specialized AI security sub-agents, and a formal AI governance program that assesses internal AI agents for risk. You will work under the guidance of senior engineers and architects to support, operate, and learn from this AI-driven program.

About the role

This position is a Junior Security Engineer role operating within CLOUDSUFI's live engagement, where AI is actively embedded across reliability and security operations. The team utilizes an AI co-pilot, specialized AI security sub-agents, and a formal AI governance program that assesses internal AI agents for risk. You will work under the guidance of senior engineers and architects to support, operate, and learn from this AI-driven program.

Key Responsibilities

• Incident Response: Support incident response activities by using AI-driven detection, correlation, and root-cause analysis tools to accelerate triage under senior guidance.
• Sub-Agent Monitoring: Help operate and monitor existing AI security sub-agents related to vulnerability scanning, threat intelligence, and vendor risk, ensuring anomalies are flagged for senior review.
• Vulnerability Prioritization: Assist in triaging vulnerability scan results using risk-based prioritization supported by intelligent tooling, such as SAST/SCA, EASM, and container scanning.
• Threat Detection & WAF: Support cloud security posture reviews using predictive analytics and help monitor and tune WAF policies using behavioral analytics and anomaly detection.
• AI Governance & Risk: Participate in architecture and design reviews using automated threat modeling tools to learn how AI-agent risks, such as prompt injection and secrets exposure, are assessed and documented.
• DevSecOps Integration: Support the implementation of security controls within CI/CD pipelines, learning automation-first approaches and helping integrate basic AI-assisted checks like secret-scanning.
• Workflow Support: Support concurrent security initiatives using AI-enabled workflow tools and help promote a data-driven, security-first culture.

Key Requirements

• English: Professional proficiency in verbal and written English communication.
• Experience: +5 years of experience in cloud security.
• Core Security Knowledge: Foundational knowledge of container, application, and cloud security concepts, alongside a basic understanding of API and web/mobile application security testing.
• AppSec Testing: Exposure to static and dynamic application security testing tools, including basic code analysis.
• Scripting & Automation: Hands-on exposure to security automation or scripting languages such as Python, Bash, or similar.
• Infrastructure & CI/CD: Beginner-to-intermediate familiarity with Infrastructure as Code tools like Terraform, Ansible, or CloudFormation, and exposure to CI/CD pipelines.
• Compliance Awareness: Familiarity with common compliance frameworks including PCI-DSS, SOC 2, SOX, and HIPAA.
• Competencies: Working knowledge of Threat Detection and Response, SIEM, Vulnerability Management, Identity Security, DevSecOps, and Cloud Security fundamentals.

Desired skills

• Certifications: CompTIA Security+ or an equivalent entry-level certification, with an AWS Cloud Practitioner or Associate-level cloud security certification preferred.
• AI/ML Exposure: Exposure to AI/ML applications in cybersecurity is considered a plus.
• Mindset: Strong curiosity and eagerness toward AI-first and automation-first security practices, with a proactive, self-driven learning attitude.
• Willingness to Learn: Eagerness to build deeper expertise in infrastructure as code, intelligent assistants, AI-driven decision systems, predictive analytics, and adaptive WAF rule tuning.
• Specialized Tags: Expertise or interest in AI Engineering, Agentic AI, DEVSECOPS, and INFOSEC.

Working conditions

• Location: Guadalajara, Mexico.
• Work Arrangement: 100% Onsite.
• Schedule: Monday to Friday.