Senior Cybersecurity Engineer

Salvo Software; México; On-site; MXN 900,000 - 1,500,000; Full time

Job summary

Salvo Software LLC is seeking a Senior Cybersecurity Engineer to own security across cloud, on-prem, and endpoint environments. The role focuses on designing controls, safeguarding client data, and guiding security practices for a distributed workforce.

You will collaborate with DevOps and Support to set security standards, lead incident response, and drive compliance with SOC 2, ISO 27001 while securing AI/ML systems.

Qualifications

• 7+ years in cybersecurity or related roles.
• Hands-on cloud security across AWS, GCP, or Azure.
• IAM, AD, MFA, and access control design.
• Networking: firewalls, VPNs, segmentation.
• DevSecOps with secure pipelines and container security.
• Experience with vulnerability scanning and penetration testing.
• SOC 2 / ISO 27001 familiarity.
• Python/Bash/PowerShell for automation.
• English: advanced (B2+).

Responsibilities

• Design and maintain security architecture across cloud, on-prem, and endpoints.
• Define identity and access management and enforce least privilege.
• Harden cloud configurations, manage secrets, monitor drift.
• Integrate security into CI/CD pipelines and scan images, code, deps.
• Define firewall, VPN, and network configs for offices and remote users.
• Set endpoint protection standards and MFA across devices.
• Lead vulnerability scans, prioritize findings, drive remediation.
• Implement SIEM, logging, and alerting and monitor for threats.
• Own incident response plans and lead investigations.
• Lead SOC 2, ISO 27001 alignment and client security assessments.
• Secure AI/ML systems and data access in AI workflows.
• Write security policies and run awareness initiatives.
• Evaluate third-party tool security before adoption.

Skills

Cloud Security

Identity & Access Management

Security Architecture

DevSecOps

Vulnerability Management

Security Monitoring

Incident Response

Compliance (SOC 2 ISO 27001)

Scripting (Python Bash PowerShell)

English Proficiency (B2+)

Tools

Docker

Kubernetes

CI/CD tooling

SIEM

EDR

Job description

Salvo Software is a global technology company specializing in custom software development and advanced engineering solutions. With distributed teams across the US, LATAM, and India, we partner with clients to build high-performance, scalable systems that solve complex technical challenges. Our culture values innovation, ownership, and engineering excellence.

Role Overview

We are seeking a Senior Cybersecurity Engineer to own the security posture of our cloud environments, internal systems, and distributed workforce. You will design and implement security controls, protect sensitive client and OEM data, and make sure our infrastructure and delivery pipelines meet the standards our partners expect.

This role collaborates closely with our DevOps Engineer and Technical Support Specialist, setting the security standards their work follows and providing technical guidance on security matters across the company.

Key Responsibilities

• Security Architecture: Design and maintain security architecture across cloud (AWS, GCP, Azure), on-prem, and endpoint environments, applying Zero Trust principles.
• Identity & Access Management: Define and enforce identity, access, and least-privilege policies across Active Directory, cloud IAM, VPNs, and internal tools, including strict project-based access to sensitive, licensed OEM data.
• Cloud Security: Assess and harden cloud configurations, manage secrets, and monitor for misconfigurations and policy drift.
• DevSecOps: Integrate security into CI/CD pipelines, including code and dependency scanning, container image scanning, secrets detection, and secure pipeline design.
• Network Security: Define and review configurations for firewalls, routers, switches, and VPNs to keep office locations and remote users secure.
• Endpoint Security: Set standards for endpoint protection (EDR), patching, disk encryption, and MFA across all company devices.
• Vulnerability Management: Run regular vulnerability scans and penetration tests, prioritize findings, and drive remediation.
• Security Monitoring: Implement and manage logging, SIEM, and alerting to detect and investigate suspicious activity.
• Incident Response: Own incident response plans and lead investigation, containment, and post-incident analysis.
• Compliance: Lead alignment with security and compliance frameworks such as SOC 2 and ISO 27001, and support client security assessments and questionnaires.
• AI Systems Security: Assess and secure AI/ML and LLM-based systems, including data access, model serving, and integrations.
• Policies & Awareness: Write and maintain security policies and run security awareness initiatives for the team.
• Vendor Risk: Evaluate the security of third-party tools and providers before adoption.

• Experience: 7+ years in cybersecurity, security engineering, or a closely related role (mandatory).
• Cloud Security: Deep, hands-on experience securing AWS, GCP, or Azure environments.
• Identity & Access: Strong experience with IAM, Active Directory, MFA, and access control design.
• Network Security: Solid knowledge of firewalls, VPNs, network segmentation, and secure network design.
• DevSecOps: Hands-on experience integrating security into CI/CD pipelines and containerized environments (Docker, Kubernetes).
• Monitoring & Response: Experience with SIEM, EDR, and leading incident response.
• Vulnerability Management: Experience with vulnerability scanning and penetration testing tools and practices.
• Compliance: Practical experience with SOC 2, ISO 27001, or similar frameworks.
• Scripting: Python, Bash, and/or PowerShell for security automation.
• AI Security (Preferred): Experience assessing or securing AI/ML or LLM-based systems.
• Certifications (Preferred): CISSP, CISM, OSCP, or cloud security certifications (AWS, Azure, or GCP).
• Language: Advanced English, spoken and written (B2 or higher).
• Mindset: A pragmatic decision-maker who balances strong security with the needs of a fast-moving software team, and stays deeply hands-on.
• Location/Communication: Based in Mexico and comfortable supporting a global team across different time zones (US, Mexico, India).