2 months ago
Lima, PeruSenior
Responsibilities
- Design and deploy cloud and network security architectures across AWS, Azure, and GCP environments.
- Build automated threat-detection mechanisms, SIEM/SOAR pipelines, and incident response runbooks.
- Conduct vulnerability assessments, penetration testing, and automated compliance auditing.
- Lead complex security incident investigations, root-cause analysis, and remediation.
- Integrate DevSecOps practices, SAST/DAST, and dependency scanning into CI/CD pipelines with DevOps and engineering teams.
- Own enterprise risk management frameworks and support compliance with ISO 27001, SOC 2, and GDPR.
- Drive zero-trust security principles and foster a security-first engineering culture across multi-cloud environments.
Requirements
- 5+ years of hands-on experience in Security Operations, Threat Modeling, or Infrastructure Security Engineering.
- Deep technical expertise in cloud security across AWS, Azure, or GCP and identity management architectures including IAM, OAuth2, and SAML.
- Experience implementing and configuring enterprise SIEM/SOAR, XDR/EDR, and threat-intelligence platforms.
- Proficiency in scripting and automation using Python, Bash, or Go.
- Hands-on experience integrating SAST, DAST, and IAST security tooling into CI/CD pipelines.
- Demonstrated ability to lead critical security incidents and influence engineering teams toward security best practices.
- Advanced written and spoken English fluency is mandatory.
- Active CISSP, CISM, CCSP, or CEH certification is preferred.
- Experience with IaC security scanning tools such as Terraform, Checkov, or Trivy is preferred.
- Experience with container and orchestration security using Docker, Kubernetes, or K3s is preferred.
- Familiarity with AI-driven threat detection models or automated security orchestration frameworks is preferred.
Benefits
- 100% remote in Latin America
- Holidays off
- Paid time off
- Health insurance assistance
- Growth opportunities
Categories
About CodeRoad
CodeRoad is a privately held software services firm that delivers end-to-end development and infrastructure solutions for businesses. It offers nearshore staff augmentation, dedicated engineering teams, and general software engineering to help companies scale products and systems. The company operates on a services and consulting model, supporting clients that prefer flexible team extensions and managed delivery rather than building in-house capacity.