Sse- Security Engineer

Kutir Technologies; Región Centro; On-site; MXN 360,000 - 480,000; Full time

Job summary

Kutir Technologies seeks a Junior SSE - Security Engineer to join an onsite, 12-month engagement in Guadalajara, Mexico. You will support AI-driven security operations, incident response, and threat modeling under senior engineers, with a focus on cloud security and CI/CD security controls.

You will learn AI-assisted security practices, participate in governance reviews, and contribute to a security-first culture within a live AI-enabled program.

Qualifications

• Foundational knowledge of container, application, and cloud security concepts, with interest in automated risk detection tooling.
• Exposure to static and dynamic application security testing tools, including basic code analysis.
• Basic understanding of API and web/mobile application security testing concepts.
• Interest in penetration testing and threat assessment fundamentals; willingness to learn AI-assisted reconnaissance techniques.
• Familiarity with threat detection and response concepts, including behavioral analytics and anomaly-based detection.
• Some hands-on exposure to security automation or scripting (Python, Bash, or similar).
• Basic exposure to cloud security posture management (CSPM) and continuous monitoring concepts.
• Interest in observability and monitoring, and a willingness to learn predictive analytics and anomaly detection.

Responsibilities

• Support AI-driven incident response activities under senior guidance to speed up triage.
• Monitor and operate AI security sub-agents covering vulnerability scanning, threat intel, and vendor risk.
• Assist in documenting AI-assisted incident findings and track remediation actions to closure.
• Triaging vulnerability scans using risk-based prioritization with intelligent tooling.
• Support cloud security posture reviews using predictive analytics and monitoring dashboards.
• Monitor and tune WAF policies with behavioral analytics, under supervision.
• Participate in architecture reviews using automated threat modeling tools.
• Assist in tracking AI-risk remediation items and prepare status updates for stakeholders.
• Help implement security controls within CI/CD pipelines and learn shift-left practices.
• Support AI-enabled program workflow using shared security tools across teams.

Skills

Security Automation

Threat Detection

SIEM Basics

Observability Basics

DevSecOps

Cloud Security

Zero Trust

Incident Response

Automation

WAF Fundamentals

Education

AWS Cloud Practitioner

CompTIA Security+

Tools

Terraform

Ansible

CloudFormation

Job description

Job Title: SSE- Security Engineer

Contract Duration: 12 Months

Location: Colonia Country Club, C.P. 44610, Guadalajara, Jalisco, M xico.

Work Arrangement: 100% Onsite
Work Schedule: 5 days per week. Remote work is not available.

Role Summary

This role sits within the company's live engagement where AI is already embedded operationally across reliability and security-not a future aspiration. The team runs an AI co-pilot spanning multiple platforms, a set of purpose-built AI security sub-agents, and a formal AI governance program that assesses the company's own internal AI agents for risk. As a Junior Security Engineer, you will work under the guidance of senior engineers and architects to support, operate, and learn from this AI-driven program.

Responsibilities - AI-Driven Initiatives

1. AI-Augmented Security Operations & Incident Response

• Support incident response activities by using AI-driven detection, correlation, and root-cause analysis tools under the guidance of senior engineers to speed up triage.
• Help operate and monitor existing AI security sub-agents (covering areas such as vulnerability scanning, threat intel, and vendor risk), flagging anomalies or failures for senior review.
• Assist in documenting and following up on AI-assisted incident findings, including tracking remediation actions through to closure.

2. AI-Driven Threat & Vulnerability Prioritization

• Assist in triaging vulnerability scan results using risk-based prioritization supported by intelligent vulnerability analysis tooling (SAST/SCA, EASM, container scanning).
• Support cloud security posture reviews by using predictive analytics and intelligent monitoring dashboards, escalating notable trends to senior team members.

3. AI-Augmented Perimeter, WAF & Anomaly Detection

• Help monitor and tune WAF policies using behavioral analytics and anomaly detection dashboards, under supervision, and learn to interpret traffic pattern alerts.

4. AI Governance, Risk & Threat Modeling (Learning Track)

• Participate in architecture and design reviews that use automated threat modeling tools, learning how AI-agent risk (e.g., prompt injection, authorization gaps, secrets exposure) is assessed and documented.
• Assist in tracking action items from the AI-risk remediation roadmap and help prepare status updates for stakeholders.

5. AI-Enabled DevSecOps & CI/CD

• Support the implementation of security controls within CI/CD pipelines, learning automation-first and AI-augmented approaches and shift-left practices from senior engineers.
• Help integrate basic AI-assisted checks (e.g., secret-scanning, dependency checks) into the development lifecycle.

6. AI-Enabled Program & Workflow Support

• Support multiple concurrent security initiatives using AI-enabled workflow and tracking tools shared across SRE and Security teams.
• Help promote a security-first culture by learning and sharing data-driven, AI-backed security practices with the wider team.

Security Capabilities

• Foundational knowledge of container, application, and cloud security concepts, with interest in automated risk detection tooling.
• Exposure to static and dynamic application security testing tools, including basic code analysis.
• Basic understanding of API and web/mobile application security testing concepts.
• Interest in penetration testing and threat assessment fundamentals; willingness to learn AI-assisted reconnaissance techniques.
• Familiarity with threat detection and response concepts, including behavioral analytics and anomaly-based detection.
• Some hands-on exposure to security automation or scripting (Python, Bash, or similar).
• Basic exposure to cloud security posture management (CSPM) and continuous monitoring concepts.
• Interest in observability and monitoring, and a willingness to learn predictive analytics and anomaly detection.

About You

• 5 9 years of experience in cloud security, IT security, or a related engineering role, with an eagerness to build deeper expertise in infrastructure as code.
• Some exposure to cloud-native logging and monitoring tools; interest in AI-driven alerting and noise reduction.
• Basic familiarity with WAF concepts and a willingness to learn adaptive rule tuning.
• Coursework or hands-on exposure to security monitoring and observability platforms.
• Exposure to CI/CD pipelines and interest in integrating security controls and shift-left practices.
• Basic understanding of vulnerability management concepts and risk-based prioritization.
• Awareness of common compliance frameworks (PCI-DSS, SOC2, SOX, HIPAA).
• Beginner-to-intermediate familiarity with Infrastructure as Code tools (Terraform, Ansible, or CloudFormation).
• Willingness to learn incident management processes, including AI-assisted triaging.
• Strong analytical and problem-solving skills, with curiosity to assess simple architectures for vulnerabilities under senior guidance.
• Interest in learning how security policies, standards, and governance frameworks are developed and maintained, including for AI-agent usage.

Core Competencies

Working knowledge of, or strong willingness to learn, several of the following domains:

• Security Automation and AI Integration
• Threat Detection and Response (EDR/XDR/NDR)
• SIEM, Logging, and Observability basics
• UEBA and Predictive Threat Analytics (exposure)
• SOAR and automated incident response (exposure)
• Vulnerability Management fundamentals
• Identity Security basics
• Application Security and WAF fundamentals
• DevSecOps and Secure SDLC
• Cloud Security (IaaS/SaaS) fundamentals
• Zero Trust Architecture concepts
• Network Security basics (IDS/IPS, segmentation, access controls)
• Incident Response fundamentals
• AI Agent Risk & Governance basics (authorization models, prompt-injection risk, secrets exposure in AI tool configs)

Preferred Certifications

• AWS Cloud Practitioner / Associate-level cloud security certification (preferred, not required)
• CompTIA Security+ or equivalent entry-level security certification
• Exposure to AI/ML applications in cybersecurity is a plus

What Sets You Apart

• Strong curiosity and eagerness toward AI-first and automation-first security practices.
• Willingness to learn intelligent assistants and AI-driven decision systems used in security workflows, and to develop an understanding of the risks those systems introduce.
• A proactive, self-driven learning attitude and ability to grow through data-driven security insights.
• Genuine interest in next-generation cybersecurity capabilities using AI and automation.

Skills

• AI Engineering
• Agentic AI
• DEVSECOPS
• INFOSEC