Senior Application Security Engineer

THOUGHT BYTE; Región Centro; On-site; MXN 900,000 - 1,200,000; Full time

Job summary

THOUGHT BYTE seeks a Senior Application Security Engineer to advance cloud security posture across AWS, CNAPP, and SaaS platforms. You will own threat modeling, vulnerability management, and security-by-design initiatives while collaborating with Cloud, DevOps, and Application teams.

Responsibilities include implementing Wiz/CNAPP, managing SSPM for enterprise SaaS, and driving secure software development with Veracode and Nexus IQ integrations.

Qualifications

• Bachelor's degree in computer science or related field.
• 5–8+ years of cybersecurity/cloud security experience.
• Desirable AWS Security Specialty, CCSP, CISSP, Security+ or similar.
• Strong analytical and collaboration skills.

Responsibilities

• Identify, prioritize, and remediate cloud and application risks.
• Manage Wiz/CNAPP, CSPM, SSPM across AWS environments.
• Lead vulnerability management and security architecture initiatives.
• Support SaaS security with SSPM, OAuth/API risk remediation.
• Coordinate with SOC/Incidents for investigations and remediation.
• Automate security assessments and reporting where possible.

Skills

CSPM

SSPM

Enterprise Cloud Security

Cloud IAM

Least privilege

Threat detection

Security analytics

Cloud vulnerability management

Security policy

Collaboration

Education

Bachelors in CS/InfoSec

Tools

Wiz

CrowdStrike

Veracode SAST/DAST

Nexus IQ

AWS

CloudSecurity tooling

Job description

Role: Senior Application Security Engineer

Duration: Long-Term Contract

Job Summary

• We are seeking an experienced Cloud Security & CNAPP Engineer / Analyst with strong hands-on expertise in Wiz, CSPM, SSPM, CrowdStrike, AWS, Cloud Security, Veracode SAST/DAST, and Nexus IQ.
• The candidate will be responsible for identifying, assessing, prioritizing, and remediating security risks across cloud, SaaS, application, and workload environments. The role will focus on improving cloud security posture, vulnerability management, application security, threat detection, and security engineering capabilities.

Key Responsibilities

Cloud Security & CNAPP

• Manage and monitor Wiz/CNAPP and CSPM capabilities across AWS and cloud environments.
• Identify and prioritize cloud misconfigurations, vulnerabilities, identity risks, exposed assets, and attack paths.
• Develop cloud security policies, baselines, dashboards, and risk-prioritization processes.
• Work with Cloud, DevOps, Infrastructure, and Application teams to drive remediation.
• Support cloud security architecture, threat modeling, and security-by-design initiatives.
• Implement and maintain security controls across AWS environments.
• Secure AWS services including IAM, EC2, S3, VPC, RDS, Lambda, EKS, KMS, CloudTrail, and CloudWatch.
• Assess IAM permissions, network security, encryption, logging, monitoring, and workload security.
• Support vulnerability management and cloud security risk remediation.

SSPM & SaaS Security

• Monitor and manage SSPM capabilities for enterprise SaaS applications.
• Identify SaaS misconfigurations, excessive permissions, risky integrations, OAuth/API risks, and identity-related issues.
• Work with application and business teams to remediate SaaS security findings.
• Support CrowdStrike Falcon administration, monitoring, and investigation.
• Analyze endpoint and cloud workload alerts, IOCs, suspicious activity, and potential threats.
• Collaborate with SOC and Incident Response teams on security investigations and remediation.

Application Security

• Support application security scanning using Veracode SAST and DAST.
• Analyze and prioritize application vulnerabilities and coordinate remediation with development teams.
• Manage and support Nexus IQ for open-source/software composition security and vulnerability management.
• Integrate application security findings into overall vulnerability and risk management processes.

Security Engineering & Automation

• Develop and improve security policies, procedures, playbooks, and operational processes.
• Automate security assessments, reporting, and remediation activities where appropriate.
• Continuously improve cloud, application, and workload security capabilities.

Required Skills & Experience

• Cloud Security Posture Management (CSPM)
• SaaS Security Posture Management (SSPM)
• Enterprise Cloud Security architecture
• Cloud IAM, least privilege, workload and container security
• Cloud vulnerability management and risk prioritization
• Veracode SAST and DAST
• Nexus IQ / Software Composition Analysis (SCA)
• Cloud logging, monitoring, threat detection, and security analytics
• Experience identifying and remediating cloud misconfigurations and security vulnerabilities

Qualifications

• Bachelor’s degree in computer science, Cybersecurity, Information Security, or related field.
• 5–8+ years of cybersecurity/cloud security experience, depending on seniority.
• Relevant certifications such as AWS Security Specialty, CCSP, CISSP, Security+, CrowdStrike, Wiz, or cloud security certifications are desirable.
• Strong analytical and problem-solving skills.
• Strong understanding of Wiz, CSPM, SSPM, CrowdStrike, AWS, Cloud Security, Veracode, and Nexus IQ.
• Ability to prioritize security risks based on business impact and exposure.
• Strong collaboration skills with Cloud, DevOps, Application, Infrastructure, SOC, IAM, and Security teams.
• Strong communication and documentation skills.
• Ability to operate effectively in a fast-paced enterprise security environment.