Security Engineer

hace 9 horas

Ciudad de México, Ciudad de México Nir Yu A tiempo completo

The Role:

We collaborate with our client to assist the world's largest companies in breaking down data silos, enabling teams to make quicker, more informed decisions. Their flagship product represents the most practical application of Knowledge Graphs and semantic technology available today, allowing Fortune 1000 companies to enhance the discovery, governance, and security of their data— ultimately fueling the development of some of the world's most vital technologies.

This position is perfect for a Security Engineer with expertise in Java and the Spring Framework to enhance security in enterprise applications. This role involves securing Java-based systems and ensuring compliance with data protection regulations. The ideal candidate will have a strong background in Java development, cybersecurity, and secure application architecture.

Responsibilities:

  • Design and implement security solutions for Java-based applications.

  • Secure applications, microservices, APIs, and databases against vulnerabilities.

  • Perform static (SAST) and dynamic (DAST) security testing.

  • Perform quarterly Vulnerability Scans and annual Penetration Test.

  • Manage application dependencies and vulnerabilities within established SLAs.

  • Implement and support authentication (OAuth, SAML), authorization (RBAC), and encryption.

  • Integrate security into the CI/CD pipeline to automate security testing and compliance checks.

  • Monitor, analyze, and respond to security incidents and security questionnaires.

  • Manage Data for security monitoring, compliance automation, and audit readiness.

  • Ensure compliance with data protection regulations (GDPR, CCPA, HIPAA) and security frameworks (ISO 27001, NIST, SOC 2).

  • Collaborate with development teams to enforce secure coding best practices via code reviews.

  • Work with Spring Security to enforce access controls and secure distributed applications.

  • Maintain and publish client's Authorized Software List.

  • Stay updated on the latest security vulnerabilities affecting Java and Spring ecosystems.

Requirements:

  • Bachelor's degree in Computer Science, Cybersecurity, or a related field.

  • Strong Java development experience, with proficiency in Spring Boot and Spring Security.

  • Experience with secure coding practices (OWASP Top 10, CWE, etc.).

  • Hands-on experience with security tools such as SonarQube and Snyk.

  • Knowledge of encryption techniques (AES, RSA), authentication protocols (OAuth, OpenID Connect), and API security.

  • Experience with cloud security best practices (AWS, Azure, or GCP).

Preferred:

  • Certifications such as CISSP, CEH, CSSLP, or AWS Security are a plus.

  • Experience securing microservices architectures and containerized applications (Docker, Kubernetes).

  • Familiarity with IAM (Identity & Access Management) solutions and database security.

  • Knowledge of log management, SIEM solutions, and intrusion detection.

  • Understanding of Spring Cloud Security, API Gateway security, and service mesh security.

  • Strong analytical and problem-solving skills.

  • Security Engineer

    hace 9 horas

    Ciudad de México, Ciudad de México Fintoc A tiempo completo

    En Fintoc estamos construyendo la infraestructura de pagos para Latinoamérica. Hoy más de 6.5 millones de personas usan nuestros productos todos los días, y queremos llegar a 100 millones en los próximos 5 años. Buscamos un Security Engineer que se haga cargo de la seguridad de la información de Fintoc en nuestras operaciones de México y Chile, con...

  • Security Engineer

    hace 11 horas

    Ciudad de México, Ciudad de México Datwyler A tiempo completo

    In billions of syringes and in every second car worldwide, Datwyler components make an important contribution to the safety of patients and drivers. The high-tech company focuses on high-quality, system-critical elastomer components and holds leading positions in attractive global markets such as healthcare, mobility, connectivity, general industry and food...

  • Security Engineer

    hace 10 horas

    Ciudad de México, Ciudad de México Aviva A tiempo completo

    About AvivaAviva is creating the first "phygital" neobank for emerging communities in Mexico, blending advanced technology with a human touch to deliver a unique conversational banking experience. Using machine learning, natural language processing, and computer vision, our onboarding removes historic barriers that have excluded millions from the formal...

  • Security Test Engineer

    hace 11 horas

    Ciudad de México, Ciudad de México Zurich Insurance A tiempo completo

    At Zurich Capability Center, we are looking for a:Security Test EngineerSecurity Test Engineer is responsible to assure that Security Testing deliverables are meeting the highest quality Security Standards from the technology perspective and with focus on providing Penetration testing and App sec toolset administration support for the Security Testing BTS...

  • Security Test Engineer

    hace 11 horas

    Ciudad de México, Ciudad de México LiveWell A tiempo completo

    At Zurich Capability Center, we are looking for a:Security Test EngineerSecurity Test Engineer is responsible to assure that Security Testing deliverables are meeting the highest quality Security Standards from the technology perspective and with focus on providing Penetration testing and App sec toolset administration support for the Security Testing BTS...

  • Security Test Engineer

    hace 2 semanas

    Ciudad de México, Ciudad de México Jobgether A tiempo completo

    This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Security Test Engineer in Mexico. As a Security Test Engineer, you will play a key role in ensuring the robustness and integrity of advanced silicon and IP products. You will design and execute comprehensive test strategies, identify potential hardware...

  • Application Security Engineer

    hace 9 horas

    Ciudad de México, Ciudad de México TTEC A tiempo completo

    Application Security EngineerBe the spark that brightens days and ignite your career with TTEC's award-winning employment experience. As an Application Security Engineer working remotely in Mexico, you'll be a part of creating and delivering amazing customer experiences while you also #experienceTTEC, an award-winning employment experience and company...

  • Security Engineer

    hace 12 horas

    Ciudad de México, Ciudad de México Bitcoin Devs Company A tiempo completo

    Overview The Security Engineer plays a crucial role in our organization, ensuring the security of our systems and data. This position is based in Mexico and will be 100% remote, requiring strong communication and collaboration skills to work effectively within a distributed team. The Security Engineer will be responsible for implementing and maintaining...

  • Lead Security Operations Engineer

    hace 10 horas

    Ciudad de México, Ciudad de México Cloudlinux A tiempo completo

    CloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure...

  • Application Security Engineer

    hace 11 horas

    Ciudad de México, Ciudad de México Near Shore Cyber A tiempo completo

     About the OpportunityOur US-based global BPO client is seeking an Application Security Engineer to protect mission-critical systems and applications serving millions of customers worldwide. This award-winning employer has operated for over 40 years and maintains a strong commitment to employee development, diversity, and work-life balance.You will lead...