Senior Application Security Engineer

Senior Application Security Engineer
Guadalajara, Mexico (Remote)
Full-Time
Solugenix is seeking an experienced Cloud Security & CNAPP Engineer/Analyst with strong hands-on expertise in Wiz, CSPM, SSPM, CrowdStrike, AWS, Cloud Security, Veracode SAST/DAST, and Nexus IQ.
The candidate will be responsible for identifying, assessing, prioritizing, and remediating security risks across cloud, SaaS, application, and workload environments. The role will focus on improving cloud security posture, vulnerability management, application security, threat detection, and security engineering capabilities.
Qualifications
Bachelors degree in computer science, Cybersecurity, Information Security, or related field.
5-8+ years of cybersecurity/cloud security experience, depending on seniority.
Relevant certifications such as AWS Security Specialty, CCSP, CISSP, Security+, CrowdStrike, Wiz, or cloud security certifications are desirable.
Strong analytical and problem-solving skills.
Strong understanding of Wiz, CSPM, SSPM, CrowdStrike, AWS, Cloud Security, Veracode, and Nexus IQ.
Ability to prioritize security risks based on business impact and exposure.
Strong collaboration skills with Cloud, DevOps, Application, Infrastructure, SOC, IAM, and Security teams.
Strong communication and documentation skills.
Ability to operate effectively in a fast-paced enterprise security environment.
Required Skills & Experience
Wiz/CNAPP.
Cloud Security Posture Management (CSPM).
SaaS Security Posture Management (SSPM).
CrowdStrike Falcon/EDR/XDR.
AWS Cloud Security.
Enterprise Cloud Security architecture.
Cloud IAM, least privilege, workload, and container security.
Cloud vulnerability management and risk prioritization.
Veracode SAST and DAST.
Nexus IQ/Software Composition Analysis (SCA).
Cloud logging, monitoring, threat detection, and security analytics.
Experience in identifying and remediating cloud misconfigurations and security vulnerabilities.
Responsibilities
Cloud Security & CNAPP
Manage and monitor Wiz/CNAPP and CSPM capabilities across AWS and cloud environments.
Identify and prioritize cloud misconfigurations, vulnerabilities, identity risks, exposed assets, and attack paths.
Develop cloud security policies, baselines, dashboards, and risk-prioritization processes.
Work with Cloud, DevOps, Infrastructure, and Application teams to drive remediation.
Support cloud security architecture, threat modeling, and security-by-design initiatives.
AWS & Cloud Security
Implement and maintain security controls across AWS environments.
Secure AWS services including IAM, EC2, S3, VPC, RDS, Lambda, EKS, KMS, CloudTrail, and CloudWatch.
Assess IAM permissions, network security, encryption, logging, monitoring, and workload security.
Support vulnerability management and cloud security risk remediation.
SSPM & SaaS Security
Monitor and manage SSPM capabilities for enterprise SaaS applications.
Identify SaaS misconfigurations, excessive permissions, risky integrations, OAuth/API risks, and identity-related issues.
Work with application and business teams to remediate SaaS security findings.
CrowdStrike & Threat Detection
Support CrowdStrike Falcon administration, monitoring, and investigation.
Analyze endpoint and cloud workload alerts, IOCs, suspicious activity, and potential threats.
Collaborate with SOC and Incident Response teams on security investigations and remediation.
Application Security
Support application security scanning using Veracode SAST and DAST.
Analyze and prioritize application vulnerabilities and coordinate remediation with development teams.
Manage and support Nexus IQ for open source/software composition security and vulnerability management.
Integrate application security findings into overall vulnerability and risk management processes.
Security Engineering & Automation
Develop and improve security policies, procedures, playbooks, and operational processes.
Automate security assessments, reporting, and remediation activities where appropriate.
Continuously improve cloud, application, and workload security capabilities.
About Solugenix
Solugenix is a leader in IT services, delivering cutting-edge technology solutions, exceptional talent, and managed services to global enterprises. With extensive expertise in highly regulated and complex industries, we are a trusted partner for integrating advanced technologies with streamlined processes. Our solutions drive growth, foster innovation, and ensure compliance providing clients with reliability and a strong competitive edge.
Recognized as a 2024 Top Workplace, Solugenix is proud of its inclusive culture and unwavering commitment to excellence. Our recent expansion, with new offices in the Dominican Republic, Jakarta, and the Philippines, underscores our growing global presence and ability to offer world-class technology solutions. Partnering with Solugenix means more than just business it means having a dedicated ally focused on your success in today's fast-evolving digital world.

Work arrangement
Yes