Senior Cybersecurity Engineer

Salvo Software

. Design and maintain security architecture across cloud (AWS, GCP, Azure), on-prem, and endpoint environments using Zero Trust principles .

Posted 11/6/2026full-timeRemote • MexicoSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in cybersecurity, focusing on security architecture across cloud environments (AWS, GCP, Azure) and on-premises systems. Proficient in implementing Zero Trust principles, managing identity and access controls, and integrating security into CI/CD pipelines.

Highest-signal resume keywords

7+ Years In CybersecurityAWS, GCP, Azure SecurityIAM, Active Directory, MFAVulnerability Scanning And Penetration TestingCISSP, CISM, OSCP Certifications

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Architecture DesignZero Trust PrinciplesCI/CD Security IntegrationVulnerability ScanningPenetration TestingCloud IAM ManagementNetwork Security DesignSecurity Policy DevelopmentIncident Response ManagementSecurity Automation (Python, Bash, PowerShell)

Soft Skills

Pragmatic Decision-MakingCollaborationTechnical GuidanceCommunication

Tools & Technologies

SIEMEDRDockerKubernetesVPNsFirewallsEndpoint Protection

Certifications & Qualifications

CISSPCISMOSCPAWS Security CertificationAzure Security CertificationGCP Security Certification

Industry Keywords

SOC 2ISO 27001AI/ML SecurityData Access ControlSecurity Awareness Initiatives

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityDockerFirewallsGoogle Cloud PlatformKubernetesPython

About the role

Key responsibilities & impact

Design and maintain security architecture across cloud (AWS, GCP, Azure), on-prem, and endpoint environments using Zero Trust principles
Define and enforce identity, access, and least-privilege policies across Active Directory, cloud IAM, VPNs, and internal tools
Manage strict project-based access to sensitive, licensed OEM data
Assess and harden cloud configurations, manage secrets, and monitor for misconfigurations and policy drift
Integrate security into CI/CD pipelines, including code and dependency scanning, container image scanning, secrets detection, and secure pipeline design
Define and review firewall, router, switch, and VPN configurations
Set endpoint protection standards covering EDR, patching, disk encryption, and MFA
Run vulnerability scans and penetration tests, prioritize findings, and drive remediation
Implement and manage logging, SIEM, and alerting to detect and investigate suspicious activity
Own incident response plans and lead investigation, containment, and post-incident analysis
Lead alignment with SOC 2, ISO 27001, and similar security and compliance frameworks
Support client security assessments and questionnaires
Assess and secure AI/ML and LLM-based systems, including data access, model serving, and integrations
Write and maintain security policies and run security awareness initiatives
Evaluate the security of third-party tools and providers before adoption
Collaborate closely with the DevOps Engineer and Technical Support Specialist, setting security standards and providing technical guidance across the company

Requirements

What you’ll need

7+ years in cybersecurity, security engineering, or a closely related role (mandatory)
Deep, hands-on experience securing AWS, GCP, or Azure environments
Strong experience with IAM, Active Directory, MFA, and access control design
Solid knowledge of firewalls, VPNs, network segmentation, and secure network design
Hands-on experience integrating security into CI/CD pipelines and containerized environments (Docker, Kubernetes)
Experience with SIEM, EDR, and leading incident response
Experience with vulnerability scanning and penetration testing tools and practices
Practical experience with SOC 2, ISO 27001, or similar frameworks
Python, Bash, and/or PowerShell for security automation
Experience assessing or securing AI/ML or LLM-based systems (preferred)
CISSP, CISM, OSCP, or cloud security certifications (AWS, Azure, or GCP) (preferred)
Advanced English, spoken and written (B2 or higher)
Pragmatic decision-maker balancing strong security with the needs of a fast-moving software team and staying deeply hands-on
Based in Mexico and comfortable supporting a global team across different time zones (US, Mexico, India)