Senior Security Engineer – Cloud & Application Security

About the role

Global Technology Services is seeking a Senior Security Engineer to strengthen cloud and application security within a large‑scale AWS modernization program. The role focuses on identity, access controls, secure integrations, and remediation of security weaknesses across Colombia and Mexico.

Key responsibilities

• Review and harden AWS and application security configurations, implementing least‑privilege IAM controls.
• Support authentication and authorization flows using IAM, Amazon Cognito, OAuth, OIDC, and JWT in API and application integrations.
• Assess security risks, investigate findings, and drive remediation across infrastructure and application components.
• Integrate security checks into delivery pipelines and document decisions, controls, and validation results.

Required profile

• Bachelor’s degree in Computer Science, Information Systems, Engineering or equivalent practical experience.
• Professional proficiency in English, both written and spoken.
• Proven experience in cloud or application security, preferably with AWS.
• Ability to explain security risks and practical remediation steps to engineering teams.

Required skills

• AWS (IAM, Cognito, Lambda, API Gateway)
• Authentication & authorization protocols: OAuth, OIDC, JWT
• API security and vulnerability assessment
• Secrets management, security logging, and secure development practices
• Integration of security scanning into GitLab CI/CD (nice to have)
• Threat modeling and vulnerability testing (nice to have)