Security Engineer

• Continuously identify, log, and analyze control nonconformities and unresolved/high-risk vulnerabilities across different sources.
• Maintain the Risk Registry and deliver timely risk treatment updates and reports to stakeholders.
• Execute annual third-party cybersecurity risk assessments, ensuring alignment with internal risk standards and external compliance requirements.
• Maintain and enhance the cybersecurity control framework by mapping existing controls, collecting evidence of execution, identifying gaps or nonconformities, and aligning overlapping requirements under a unified structure.
• Ensure adherence to frameworks such as HITRUST, HIPAA, and Spain ENS certification.
• Create and maintain cybersecurity-related policies and procedures.
• Ensure documentation complies with regulatory and contractual standards.

Senior GRC Security Specialist

• Lead security end-to-end across the PHP/Laravel and TypeScript/React codebase, AWS infrastructure, payment and customer-data flows, and compliance posture
• Set the multi-year security direction and build scalable security controls
• Establish threat models, automated scanning, incident runbooks, and security standards
• Own application security, including secure SDLC, code and design reviews, CI scanning, and vulnerability-management processes
• Strengthen AWS and infrastructure security, including IAM, networking, encryption, secrets management, and EKS/Kubernetes hardening
• Map PCI scope and drive SOC 2 and LGPD readiness
• Manage vendor risk and respond to customer or auditor security questionnaires
• Improve detection coverage using Datadog, Sentry, and AWS signals
• Lead incident response and establish baseline MTTD/MTTR
• Define security controls, review gates, and conventions for AI-agent-authored code
• Create standards, playbooks, and hiring criteria for the future security team
• Collaborate with delivery teams and Cloud & DevOps while initially performing most hands-on work
• Build a business case and plan for the first security hires, with an explicit path to leading a small team in roughly 12–18 months

Lead Security Engineer

• Maintain, enhance, and debug existing ColdFusion (CFML) web applications
• Write, optimize, and troubleshoot SQL queries, views, and stored procedures
• Develop and integrate front-end components using HTML, CSS, and JavaScript
• Diagnose and resolve application bugs, technical issues, and production errors
• Support the refactoring, modernization, or migration of legacy ColdFusion applications
• Integrate RESTful and SOAP web services into CFML applications
• Participate in Agile ceremonies, including daily stand-ups, sprint planning, and estimation
• Use Git for version control and maintain accurate technical documentation
• Contribute to peer code reviews and uphold code-quality standards

Junior/Semi-Senior Cold-Fusion Developer – Security and Safety Solutions

• Own the technical security posture of production AI systems, including infrastructure, pipelines, and agents
• Harden cloud infrastructure, APIs, internal tooling, and CI/CD pipelines through encryption, secrets management, logging, and access controls
• Conduct vulnerability scanning, penetration testing, adversarial testing, threat modeling, and manual security reviews
• Drive vulnerability remediation through closure
• Secure AI and agentic systems against prompt injection, adversarial inputs, unauthorized actions, unsafe outputs, and data leakage
• Monitor production AI systems for anomalies, abuse attempts, and unsafe decisions
• Own Azumo's automated security, cost, and architecture audit across client codebases
• Build alerting and detection, investigate incidents, and lead containment, remediation, root-cause analysis, and preventative changes
• Maintain operational visibility into access patterns and security events
• Handle security questionnaires, vendor risk assessments, enterprise RFPs, and technical security discussions with clients
• Conduct architecture reviews and promote secure development practices with engineering, Product, Compliance, and Operations
• Work within client repositories, tooling, and compliance reviews, including engagements with HIPAA requirements

Senior Security Engineer

• Own day-to-day security operations
• Support the company's compliance programs
• Serve as the company's security point of contact in a sole-coverage role
• Work hand-in-hand with the small DevOps team, with DevOps support for execution
• Perform hands-on cloud security engineering across AWS-first infrastructure
• Triage security alerts and respond to cloud incidents
• Implement Terraform changes through pull requests
• Apply Kubernetes security practices, including RBAC and workload hardening
• Manage vulnerability scanning, prioritization, and remediation coordination
• Support SOC 2 audits by providing control evidence and working with auditors
• Address CI/CD and software supply-chain security

Senior Cloud Security Engineer

• Support the Enterprise AI Security Program
• Help ensure the safe and secure adoption of AI across internal chatbots, agentic workflows with tool access, code assistants, and agentic platforms
• Assess new AI tools and protocols by analyzing their architecture, trust boundaries, and authentication models
• Develop specific and testable security policies
• Translate security policies into automated enforcement through policy-as-code, CI/CD gates, gateway-level controls, and DLP rules
• Evaluate and address AI/LLM security risks, including prompt injection, unsafe outputs, tool-use abuse, data leakage, identity misuse, and agentic workflow escalation
• Provide defensible security opinions on new tools, protocols, and frameworks within days
• Turn vendor capability gaps and new tool risk profiles into implementable and testable control requirements
• Discover and govern shadow-AI/BYOAI usage at scale
• Support detection engineering, SIEM integration, and telemetry design for AI and agent behavior

AI Security Engineer – AI, Agentic Security

• Diseñar y desarrollar arquitecturas de ciberseguridad para servicios y sistemas de información on-premise y en nube
• Realizar análisis del contexto interno y externo de la organización con enfoque holístico y basado en riesgos
• Desarrollar e implementar indicadores de cumplimiento y modelos de madurez de ciberseguridad
• Desarrollar e implementar metodologías avanzadas de ataque RedTeam
• Desarrollar e implementar metodologías avanzadas de defensa BlueTeam
• Desarrollar e implementar metodologías avanzadas de PurpleTeam
• Gestionar riesgos de ciberseguridad y mantener el proceso de respuesta a ciberincidentes
• Gestionar equipos de respuesta y ataque, registrar y reportar la gestión de ciberincidentes
• Monitorear prácticas de seguridad en pruebas de penetración
• Participar en proyectos de Seguridad de la Información
• Responder requerimientos y consultas de distintas áreas de la organización y terceros
• Realizar seguimiento y control al cumplimiento del Framework de Control
• Generar y presentar informes de cumplimiento, definir planes de acción y gestionar su ejecución

Consultor de Ciberseguridad

• Own the technical security posture of production AI systems, including infrastructure, pipelines, and agents
• Harden cloud infrastructure, APIs, internal tooling, and CI/CD pipelines through encryption, secrets management, logging, and access controls
• Conduct vulnerability scanning, penetration testing, adversarial testing, threat modeling, and manual security reviews
• Drive vulnerability remediation through closure
• Build prompt-injection defenses, adversarial-input testing, and guardrails for tool-calling and agentic AI systems
• Monitor production AI systems for anomalies, abuse attempts, and unsafe decisions
• Own the automated security, cost, and architecture audit across client codebases
• Implement alerting and detection, investigate incidents, and lead containment, root-cause analysis, remediation, and prevention
• Maintain operational visibility into access patterns and security events
• Handle security questionnaires, vendor risk assessments, enterprise RFPs, and direct technical discussions with clients
• Conduct architecture reviews and establish secure development patterns with engineering, Product, Compliance, and Operations
• Work within client repositories, tooling, and compliance reviews, including engagements with requirements such as HIPAA

• Plan, prepare, and conduct cybersecurity internal assessments focused on regulatory requirements
• Assess the design and operating effectiveness of cybersecurity controls, processes, and evidence against applicable requirements
• Support gap assessments, readiness reviews, and internal assurance activities across relevant business units, countries, and product areas
• Conduct interviews and workshops with control owners, product teams, and other stakeholders to understand processes, collect evidence, and validate assessment results
• Document assessment scope, methodology, findings, risks, evidence, and conclusions in a clear and auditable manner
• Ensure compliance with applicable external and internal regulations, procedures, and guidelines
• Conduct M&A security-related assessments and support secure shutdown activities during divestments, carve-outs, and site closures
• Assess secure decommissioning of systems and applications, as well as access rights
• Work closely with cybersecurity, governance, risk, compliance, legal, product, and business stakeholders
• Identify gaps, document findings, and support remediation efforts

Cybersecurity Internal Assessor

• Own the technical security posture of production AI systems, including infrastructure, pipelines, and agents
• Harden cloud infrastructure, APIs, internal tooling, and CI/CD pipelines through encryption, secrets management, logging, and access controls
• Conduct scanning, penetration testing, adversarial testing, threat modeling, and manual security reviews
• Drive vulnerability remediation through closure
• Defend AI and agentic systems against prompt injection and adversarial inputs
• Build guardrails for tool-calling and agentic systems that are bounded, observable, auditable, and safe to fail
• Own the automated security, cost, and architecture audit across client codebases
• Configure audit checks, severity grading, frequency, and accuracy
• Implement monitoring and detection, investigate anomalies, and perform root-cause analysis
• Run incident response, including containment and fixes to prevent recurrence
• Work within client repositories, tooling, and compliance reviews such as HIPAA

Security Engineer jobs in Colombia

Senior GRC Security Specialist

Lead Security Engineer

Junior/Semi-Senior Cold-Fusion Developer – Security and Safety Solutions

Senior Security Engineer

Senior Cloud Security Engineer

AI Security Engineer – AI, Agentic Security

Consultor de Ciberseguridad

Senior Security Engineer

Cybersecurity Internal Assessor

Senior Security Engineer – Platforms & AI