5 days ago
Mexico City, MexicoStaff+
Responsibilities
- Integrate SAST, DAST, and SCA security testing into Jenkins, GitHub Actions, GitLab CI, and other CI/CD pipelines.
- Define and enforce security guardrails for Terraform, CloudFormation, container images, and Kubernetes workloads.
- Build automation for vulnerability detection, remediation workflows, and continuous compliance checks using Python, Go, or Bash.
- Develop and enforce security policies, access controls, and policy-as-code across cloud, CI/CD, and on-premise environments.
- Oversee SIEM/SOC monitoring and lead security incident investigation, response, and root-cause analysis.
- Lead internal and external security audits aligned with NIST, ISO 27001, OWASP, and related frameworks.
- Mentor engineering teams on secure coding, DevSecOps practices, tools, and technologies.
- Contribute to the security roadmap and evaluate security tools and technologies.
Requirements
- Bachelor’s degree in Systems Engineering, Computer Science, Information Technology, or a related field.
- 8+ years of experience in Information Security, DevOps, or Platform Engineering.
- Hands-on experience with Jenkins, GitHub Actions, GitLab CI, and integrating SAST, DAST, and SCA into pipelines.
- Proficiency in Python, Go, or Bash for security automation and custom tooling.
- Experience securing AWS, GCP, Azure, containers, and Kubernetes, including Cloud Security Posture Management.
- Expertise with Terraform, Ansible, CloudFormation, Checkov, and tfsec.
- Familiarity with HashiCorp Vault, AWS KMS, firewalls, IDS/IPS, VPN, encryption, and SIEM/SOC environments.
- Knowledge of NIST, ISO 27001, OWASP, security incident management, and root-cause analysis.
- Relevant certifications such as CISSP, CEH, CompTIA Security+, AWS Certified Security – Specialty, or Certified Kubernetes Security Specialist.
- Strong collaboration, analytical, prioritization, adaptability, and communication skills, with intermediate English proficiency.
Tech Stack
AnsibleAWSAzureBashGitHub ActionsGitLab CI/CDGoGoogle Cloud PlatformJenkinsKubernetesPythonTerraform
Categories
