Application Security Engineer – Threat Modeling & Secure SDLC | Hybrid in Mexico City
GSB Solutions4 hours ago
Mexico City, MexicoMid Level
Responsibilities
- Create threat models using STRIDE and apply Security by Design and Secure SDLC practices.
- Analyze and manage information-security risks, attack surfaces, information flows, vulnerabilities, and security controls.
- Assess the security of web, mobile, backend, API, service, and integration environments, including Windows, Linux, and databases.
- Develop security recommendations and track vulnerability evaluation and remediation.
- Collaborate with development, architecture, and infrastructure teams across distributed, service-based environments.
- Translate complex technical risks into understandable business impacts for technical, executive, and business audiences.
- Use AI as support for threat modeling, risk analysis, test-case generation, and security-control reviews.
- Manage multiple initiatives and stakeholders while identifying security risks, improvement opportunities, and operational efficiencies.
Requirements
- Knowledge of web, mobile, and backend application security.
- Knowledge of Security by Design, Secure SDLC, STRIDE threat modeling, and information-security risk analysis.
- Knowledge of OWASP Top 10 Web, OWASP Mobile Top 10, API security, services, integrations, Windows, Linux, and database security.
- Experience collaborating with development, architecture, and infrastructure teams.
- Knowledge of distributed, service-based, and microservices architectures.
- Critical thinking, risk-oriented analysis, effective communication, organization, and the ability to manage multiple initiatives and stakeholders.
- Conversational intermediate English and advanced Spanish are indispensable and will be evaluated.
- Foreign residents of Mexico must have valid INE, CURP, NSS, and RFC documents.
Benefits
- Hybrid work arrangement in Mexico City.
- Gross salary of $41,500 monthly.
- Benefits above those required by law.
About GSB Solutions
GSB Solutions is a Mexico City–based IT services firm providing technology and telecommunications clients across the Americas with consulting, software development, staffing, and managed support. The company delivers projects and application support in stacks such as Oracle Database, PL/SQL, and Oracle APEX, along with web integration and performance optimization. Founded in 2009, it is privately held and offers recruitment, training, and quality assurance alongside outsourcing engagements.