Cloud and AI Security Engineer

About the role

This position is a Junior Security Engineer role operating within CLOUDSUFI's live engagement, where AI is actively embedded across reliability and security operations. The team utilizes an AI co-pilot, specialized AI security sub-agents, and a formal AI governance program that assesses internal AI agents for risk. You will work under the guidance of senior engineers and architects to support, operate, and learn from this AI-driven program.

Key Responsibilities

• Incident Response:

  Support incident response activities by using AI-driven detection, correlation, and root-cause analysis tools to accelerate triage under senior guidance.

• Sub-Agent Monitoring:

  Help operate and monitor existing AI security sub-agents related to vulnerability scanning, threat intelligence, and vendor risk, ensuring anomalies are flagged for senior review.

• Vulnerability Prioritization:

  Assist in triaging vulnerability scan results using risk-based prioritization supported by intelligent tooling, such as SAST/SCA, EASM, and container scanning.

• Threat Detection & WAF:

  Support cloud security posture reviews using predictive analytics and help monitor and tune WAF policies using behavioral analytics and anomaly detection.

• AI Governance & Risk:

  Participate in architecture and design reviews using automated threat modeling tools to learn how AI-agent risks, such as prompt injection and secrets exposure, are assessed and documented.

• DevSecOps Integration:

  Support the implementation of security controls within CI/CD pipelines, learning automation-first approaches and helping integrate basic AI-assisted checks like secret-scanning.

• Workflow Support:

  Support concurrent security initiatives using AI-enabled workflow tools and help promote a data-driven, security-first culture.

Key Requirements

• English:

  Professional proficiency in verbal and written English communication.

• Experience:

  +5 years of experience in cloud security.

• Core Security Knowledge:

  Foundational knowledge of container, application, and cloud security concepts, alongside a basic understanding of API and web/mobile application security testing.

• AppSec Testing:

  Exposure to static and dynamic application security testing tools, including basic code analysis.

• Scripting & Automation:

  Hands-on exposure to security automation or scripting languages such as Python, Bash, or similar.

• Infrastructure & CI/CD:

  Beginner-to-intermediate familiarity with Infrastructure as Code tools like Terraform, Ansible, or CloudFormation, and exposure to CI/CD pipelines.

• Compliance Awareness:

  Familiarity with common compliance frameworks including PCI-DSS, SOC 2, SOX, and HIPAA.

• Competencies:

  Working knowledge of Threat Detection and Response, SIEM, Vulnerability Management, Identity Security, DevSecOps, and Cloud Security fundamentals.

Desired skills

• Certifications:

  CompTIA Security+ or an equivalent entry-level certification, with an AWS Cloud Practitioner or Associate-level cloud security certification preferred.

• AI/ML Exposure:

  Exposure to AI/ML applications in cybersecurity is considered a plus.

• Mindset:

  Strong curiosity and eagerness toward AI-first and automation-first security practices, with a proactive, self-driven learning attitude.

• Willingness to Learn:

  Eagerness to build deeper expertise in infrastructure as code, intelligent assistants, AI-driven decision systems, predictive analytics, and adaptive WAF rule tuning.

• Specialized Tags:

  Expertise or interest in AI Engineering, Agentic AI, DEVSECOPS, and INFOSEC.

Working conditions

• Location:

  Guadalajara, Mexico.

• Work Arrangement:

  100% Onsite.

• Schedule:

  Monday to Friday.