About the role
Moon Bridge is hiring a Senior Cloud & Application Security Engineer in Medellín to join a growing security team supporting a US-based technology services company. You’ll identify, prioritize and fix security risks across cloud, SaaS and application environments, working directly with US-based cloud, DevOps and engineering teams.
What you’ll do
• Manage and monitor Wiz/CNAPP and cloud security posture (CSPM) across AWS, prioritizing misconfigurations, identity risks, exposed assets and attack paths
• Monitor SaaS security posture (SSPM), finding risky permissions, integrations and OAuth/API exposures
• Support CrowdStrike Falcon administration and investigate endpoint and cloud workload alerts with the SOC
• Implement and maintain security controls across AWS (IAM, EC2, S3, VPC, EKS, KMS, CloudTrail and others)
• Prioritize vulnerabilities by business risk and drive remediation with cloud, DevOps and application teams
• Support application security scanning (Veracode SAST/DAST, Nexus IQ) and coordinate fixes with developers
• Build security policies, dashboards and automation to keep improving the program
What you bring
• 6+ years of cybersecurity experience, with a strong focus on cloud security
• Hands-on experience with Wiz or another CNAPP platform (Wiz strongly preferred)
• Cloud Security Posture Management (CSPM) and SaaS Security Posture Management (SSPM) experience
• CrowdStrike Falcon or similar EDR/XDR experience
• Strong AWS security expertise and enterprise cloud security architecture knowledge
• Cloud IAM, least privilege, and workload/container security
• Professional English for daily work with US-based teams
Nice to have
• Veracode SAST/DAST experience
• Nexus IQ or other Software Composition Analysis (SCA) tools
• Cloud logging, monitoring and security analytics
• Certifications such as AWS Certified Security -