Senior Application Security Engineer

Job title: Senior Cloud & Application Security Engineer

Location: Medellín, Colombia (on-site)

Employment type: Full-time

About the role

Moon Bridge is hiring a Senior Cloud & Application Security Engineer in Medellín to join a growing security team supporting a US-based technology services company. You’ll identify, prioritize and fix security risks across cloud, SaaS and application environments, working directly with US-based cloud, DevOps and engineering teams.

What you’ll do

• Manage and monitor Wiz/CNAPP and cloud security posture (CSPM) across AWS, prioritizing misconfigurations, identity risks, exposed assets and attack paths
• Monitor SaaS security posture (SSPM), finding risky permissions, integrations and OAuth/API exposures
• Support CrowdStrike Falcon administration and investigate endpoint and cloud workload alerts with the SOC
• Implement and maintain security controls across AWS (IAM, EC2, S3, VPC, EKS, KMS, CloudTrail and others)
• Prioritize vulnerabilities by business risk and drive remediation with cloud, DevOps and application teams
• Support application security scanning (Veracode SAST/DAST, Nexus IQ) and coordinate fixes with developers
• Build security policies, dashboards and automation to keep improving the program

What you bring

• 6+ years of cybersecurity experience, with a strong focus on cloud security
• Hands-on experience with Wiz or another CNAPP platform (Wiz strongly preferred)
• Cloud Security Posture Management (CSPM) and SaaS Security Posture Management (SSPM) experience
• CrowdStrike Falcon or similar EDR/XDR experience
• Strong AWS security expertise and enterprise cloud security architecture knowledge
• Cloud IAM, least privilege, and workload/container security
• Professional English for daily work with US-based teams

Nice to have

• Veracode SAST/DAST experience
• Nexus IQ or other Software Composition Analysis (SCA) tools
• Cloud logging, monitoring and security analytics
• Certifications such as AWS Certified Security - Specialty, CCSP, CISSP or Security+

Why join

• Work on enterprise-scale security programs with US-based teams
• Join early, as part of a new team being built in Medellín
• Full-time employment with all benefits required by Colombian law

How to apply: apply here on LinkedIn, or send your CV in English to [email protected]