Security Engineer

Cloudsufi; Región Centro; Presencial; MXN 900.000 - 1.800.000; Jornada completa

Descripción de la vacante

CLOUDSUFI is seeking a Senior Security Engineer to lead AI-driven security operations, cloud security, threat detection, vulnerability management, DevSecOps, and AI security governance.

You will mentor security engineers, partner with SRE and engineering leadership, and help design scalable security programs across cloud platforms. This role demands hands-on leadership and deep security expertise.

Formación

• 6–10 years of experience in cloud/information security, with 2–3 years in a senior/lead role.
• Proven expertise across AWS/Azure/GCP and cloud security tooling.
• Hands-on security automation using Python/Bash and IaC tooling.

Responsabilidades

• Lead security incident response, threat detection, and AI-assisted investigations.
• Design and optimize security automation, AI agents, WAF, SIEM/SOAR/XDR, and anomaly detection.
• Drive cloud, application, container, API, and vulnerability security programs.
• Integrate security controls into CI/CD using DevSecOps, IaC, and policy-as-code.
• Assess AI-agent risks including prompt injection, authorization gaps, and secrets exposure.
• Develop security policies, threat models, risk remediation plans, and compliance controls.
• Mentor security engineers and partner with SRE, engineering, architects, and leadership.

Conocimientos

Security incident response

Threat detection

AI governance

Cloud security

CI/CD security

Automation scripting

Herramientas

AWS

Azure

GCP

Terraform

Ansible

CloudFormation

SIEM/SOAR/XDR

Descripción del empleo

Senior Security Engineer – AI-Driven Security Operations & Governance

CLOUDSUFI is seeking a Senior Security Engineer to lead AI-driven security operations, cloud security, threat detection, vulnerability management, DevSecOps, and AI security governance.

Key Responsibilities:

• Lead security incident response, threat detection, and AI-assisted investigations.
• Design and optimize security automation, AI security agents, WAF, SIEM/SOAR/XDR, and anomaly detection.
• Drive cloud, application, container, API, and vulnerability security programs.
• Integrate security controls into CI/CD using DevSecOps, IaC, and policy-as-code.
• Assess AI-agent risks including prompt injection, authorization gaps, and secrets exposure.
• Develop security policies, threat models, risk remediation plans, and compliance controls.
• Mentor security engineers and partner with SRE, engineering, architects, and leadership.

Requirements:

• 6–10 years of experience in cloud/information security, with 2–3 years in a senior/lead role.
• Strong expertise in AWS/Azure/GCP, Terraform/Ansible/CloudFormation, SIEM/SOAR/XDR, WAF, CSPM, and DevSecOps.
• Hands‑on experience with SAST/DAST/SCA, vulnerability management, penetration testing, and security automation using Python/Bash.
• Knowledge of SOC 2, PCI‑DSS, SOX, or HIPAA.
• Experience with AI/ML or AI-agent security is highly desirable.
• CISSP, CCSP, OSCP, AWS Security Specialty, or equivalent certifications are a plus.

Ideal Candidate:

A hands‑on security leader who can combine cloud security, automation, incident response, and AI governance to build scalable, proactive security capabilities.