Senior Security Engineer

Cybersecurity & Risk Management Medellin, Colombia


Description

Company Overview:

Global Technology Services is a rapidly expanding organization situated in Medellín, Colombia. We pride ourselves on possessing one of the most influential networks within software development and IT services for the entertainment, financial, and logistics sectors. Our corporate projections offer many opportunities for professionals to elevate their careers and experience substantial growth. Joining our team means engaging with expansive engineering teams across Latin America and the United States, contributing to cutting-edge developments in multiple industries.

We’re looking for a Security Engineer to support cloud and application security within a large scale AWS modernization program. This role focuses on identity, access controls, secure application integrations, and the remediation of security weaknesses.

Position Title: Security Engineer

Category: Security

Seniority: Senior

Location: Colombia and Mexico

What you will be doing:

You will review AWS and application security configurations, implement appropriate access controls, and support authentication and authorization flows. You will work with engineering teams on IAM, Cognito, OAuth, OIDC, and JWT within API and application integrations.

You will assess security risks, investigate findings, and support remediation across infrastructure and application components. You will help incorporate security checks into delivery workflows and document security decisions, controls, and validation results.

Required Skills & Experience

  • Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related field, or equivalent practical experience.

  • Practical experience in cloud security or application security, with exposure to AWS.

  • Experience implementing IAM controls and applying least privilege principles.

  • Understanding of authentication and authorization, including OAuth, OIDC, and JWT.

  • Experience reviewing API security, application vulnerabilities, and secure configuration.

  • Ability to assess security findings and collaborate with engineers on remediation.

  • Understanding of secure development practices, secrets management, and security logging.

  • Professional proficiency in English, both written and spoken.

Nice to Have Skills

  • Experience with Amazon Cognito and security controls for Lambda or API Gateway.

  • Experience integrating security scanning into GitLab CI/CD.

  • Experience with threat modeling, vulnerability testing, or an AWS security certification.

Soft Skills

  • Ability to explain security risks and practical remediation steps to engineering teams.

  • Sound judgment when prioritizing findings and assessing their impact.

  • Attention to detail and clear documentation of controls and decisions.