Senior Cybersecurity Engineer

Salvo Software; United States; Remote; USD 140,000 - 210,000; Full time

Job summary

Salvo Software is seeking a Senior Cybersecurity Engineer to own the security posture of our cloud environments, internal systems, and distributed workforce. You will design and implement security controls, protect client and OEM data, and ensure our infrastructure and delivery pipelines meet partner standards.

This role collaborates with our DevOps Engineer and Technical Support Specialist, setting security standards and providing guidance across the company.

Qualifications

• 7+ years in cybersecurity, security engineering, or a closely related role.
• Deep, hands-on experience securing AWS, GCP, or Azure environments.
• Advanced English, spoken and written (B2 or higher).
• Practical experience with SOC 2, ISO 27001, or similar frameworks.
• Scripting: Python, Bash, and/or PowerShell for security automation.

Responsibilities

• Design and maintain security architecture across cloud, on-prem, and endpoint environments.
• Define and enforce IAM policies across AD, cloud IAM, VPNs, and internal tools.
• Harden cloud configurations, manage secrets, and monitor for drift.
• Integrate security into CI/CD pipelines and containerized environments.
• Define firewall, VPN, and network configurations; secure office and remote users.
• Set endpoint protection standards (EDR), patching, and MFA.
• Run vulnerability scans and penetration tests; drive remediation.
• Implement logging, SIEM, and alerting; monitor for suspicious activity.
• Own incident response plans; lead investigation and post-incident analysis.
• Lead alignment with SOC 2, ISO 27001; support client security assessments.
• Assess and secure AI/ML and LLM-based systems.
• Write and maintain security policies; run security awareness initiatives.
• Evaluate security of third-party tools/providers before adoption.

Skills

Cybersecurity experience

Cloud security

IAM & AD

DevSecOps

SIEM & EDR

Vulnerability management

Incident response

Compliance frameworks

Scripting

AI security

Communication

English proficiency

Tools

Docker

Kubernetes

AWS

GCP

Azure

SIEM

EDR

Job description

Salvo Software is a global technology company specializing in custom software development and advanced engineering solutions. With distributed teams across the US, LATAM, and India, we partner with clients to build high-performance, scalable systems that solve complex technical challenges. Our culture values innovation, ownership, and engineering excellence.

Role Overview

We are seeking a Senior Cybersecurity Engineer to own the security posture of our cloud environments, internal systems, and distributed workforce. You will design and implement security controls, protect sensitive client and OEM data, and make sure our infrastructure and delivery pipelines meet the standards our partners expect.

This role collaborates closely with our DevOps Engineer and Technical Support Specialist, setting the security standards their work follows and providing technical guidance on security matters across the company.

Key Responsibilities

• Security Architecture: Design and maintain security architecture across cloud (AWS, GCP, Azure), on-prem, and endpoint environments, applying Zero Trust principles.

• Identity & Access Management: Define and enforce identity, access, and least-privilege policies across Active Directory, cloud IAM, VPNs, and internal tools, including strict project-based access to sensitive, licensed OEM data.

• Cloud Security: Assess and harden cloud configurations, manage secrets, and monitor for misconfigurations and policy drift.

• DevSecOps: Integrate security into CI/CD pipelines, including code and dependency scanning, container image scanning, secrets detection, and secure pipeline design.

• Network Security: Define and review configurations for firewalls, routers, switches, and VPNs to keep office locations and remote users secure.

• Endpoint Security: Set standards for endpoint protection (EDR), patching, disk encryption, and MFA across all company devices.

• Vulnerability Management: Run regular vulnerability scans and penetration tests, prioritize findings, and drive remediation.

• Security Monitoring: Implement and manage logging, SIEM, and alerting to detect and investigate suspicious activity.

• Incident Response: Own incident response plans and lead investigation, containment, and post-incident analysis.

• Compliance: Lead alignment with security and compliance frameworks such as SOC 2 and ISO 27001, and support client security assessments and questionnaires.

• AI Systems Security: Assess and secure AI/ML and LLM-based systems, including data access, model serving, and integrations.

• Policies & Awareness: Write and maintain security policies and run security awareness initiatives for the team.

• Vendor Risk: Evaluate the security of third-party tools and providers before adoption.

• Experience: 7+ years in cybersecurity, security engineering, or a closely related role (mandatory).

• Cloud Security: Deep, hands-on experience securing AWS, GCP, or Azure environments.

• Identity & Access: Strong experience with IAM, Active Directory, MFA, and access control design.

• Network Security: Solid knowledge of firewalls, VPNs, network segmentation, and secure network design.

• DevSecOps: Hands-on experience integrating security into CI/CD pipelines and containerized environments (Docker, Kubernetes).

• Monitoring & Response: Experience with SIEM, EDR, and leading incident response.

• Vulnerability Management: Experience with vulnerability scanning and penetration testing tools and practices.

• Compliance: Practical experience with SOC 2, ISO 27001, or similar frameworks.

• Scripting: Python, Bash, and/or PowerShell for security automation.

• AI Security (Preferred): Experience assessing or securing AI/ML or LLM-based systems.

• Certifications (Preferred): CISSP, CISM, OSCP, or cloud security certifications (AWS, Azure, or GCP).

• Language: Advanced English, spoken and written (B2 or higher).

• Mindset: A pragmatic decision-maker who balances strong security with the needs of a fast-moving software team, and stays deeply hands-on.

• Location/Communication: Based in Mexico and comfortable supporting a global team across different time zones (US, Mexico, India).