Senior Security Engineer
Lean Solutions Group Colombia
Technology, Information and Internet · 1,001-5,000 employees
Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.
About the role
Review AWS and application security configurations, implement access controls, and support authentication and authorization integrations using IAM, Cognito, OAuth, OIDC, and JWT. Assess security risks and findings, collaborate with engineering teams on remediation, integrate security checks into delivery workflows, and document controls and validation results.
What they look for
Requirements
Requires a bachelor's degree in a relevant field or equivalent practical experience, along with practical cloud or application security experience and exposure to AWS. Candidates should understand IAM and least privilege, OAuth, OIDC, JWT, API security, vulnerabilities, secure development, secrets management, and security logging, and be professionally proficient in English.
Full description
Company Overview:
Global Technology Services is a rapidly expanding organization situated in Medellín, Colombia. We pride ourselves on possessing one of the most influential networks within software development and IT services for the entertainment, financial, and logistics sectors. Our corporate projections offer many opportunities for professionals to elevate their careers and experience substantial growth. Joining our team means engaging with expansive engineering teams across Latin America and the United States, contributing to cutting-edge developments in multiple industries.
We’re looking for a Security Engineer to support cloud and application security within a large scale AWS modernization program. This role focuses on identity, access controls, secure application integrations, and the remediation of security weaknesses.
Position Title: Security Engineer
Category: Security
Seniority: Senior
Location: Colombia and Mexico
What you will be doing:
You will review AWS and application security configurations, implement appropriate access controls, and support authentication and authorization flows. You will work with engineering teams on IAM, Cognito, OAuth, OIDC, and JWT within API and application integrations.
You will assess security risks, investigate findings, and support remediation across infrastructure and application components. You will help incorporate security checks into delivery workflows and document security decisions, controls, and validation results.
Required Skills & Experience
- Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related field, or equivalent practical experience.
- Practical experience in cloud security or application security, with exposure to AWS.
- Experience implementing IAM controls and applying least privilege principles.
- Understanding of authentication and authorization, including OAuth, OIDC, and JWT.
- Experience reviewing API security, application vulnerabilities, and secure configuration.
- Ability to assess security findings and collaborate with engineers on remediation.
- Understanding of secure development practices, secrets management, and security logging.
- Professional proficiency in English, both written and spoken.
Nice to Have Skills
- Experience with Amazon Cognito and security controls for Lambda or API Gateway.
- Experience integrating security scanning into GitLab CI/CD.
- Experience with threat modeling, vulnerability testing, or an AWS security certification.
Soft Skills
- Ability to explain security risks and practical remediation steps to engineering teams.
- Sound judgment when prioritizing findings and assessing their impact.
- Attention to detail and clear documentation of controls and decisions.
Similar roles
-
Chief Cyber Security Engineer
Revolutional, LLC New Carrollton, Maryland, United States · $190K–$235K/yr
-
Principal Security Engineer
Linkly Sydney, New South Wales, Australia
-
Lead Infrastructure Security Engineer
Panthalassa Portland, Oregon, United States · $180K–$250K/yr
-
Associate Director, Application Security
S&P Global Boulder, Colorado, United States · $130K–$160K/yr
-
Info Security Engineer II (Network Security)
U.S. Bank Hopkins, Minnesota, United States
-
Senior Security Engineer - xStocks
Jobgether Brazil