Senior Cybersecurity Engineer

Salvo Software is a global technology company specializing in custom software development and advanced engineering solutions. With distributed teams across the US, LATAM, and India, we partner with clients to build high-performance, scalable systems that solve complex technical challenges. Our culture values innovation, ownership, and engineering excellence.

• →Security Architecture: Design and maintain security architecture across cloud (AWS, GCP, Azure), on-prem, and endpoint environments, applying Zero Trust principles.
• →Identity & Access Management: Define and enforce identity, access, and least-privilege policies across Active Directory, cloud IAM, VPNs, and internal tools, including strict project-based access to sensitive, licensed OEM data.
• →Cloud Security: Assess and harden cloud configurations, manage secrets, and monitor for misconfigurations and policy drift.
• →DevSecOps: Integrate security into CI/CD pipelines, including code and dependency scanning, container image scanning, secrets detection, and secure pipeline design.
• →Network Security: Define and review configurations for firewalls, routers, switches, and VPNs to keep office locations and remote users secure.
• →Endpoint Security: Set standards for endpoint protection (EDR), patching, disk encryption, and MFA across all company devices.
• →Vulnerability Management: Run regular vulnerability scans and penetration tests, prioritize findings, and drive remediation.
• →Security Monitoring: Implement and manage logging, SIEM, and alerting to detect and investigate suspicious activity.
• →Incident Response: Own incident response plans and lead investigation, containment, and post-incident analysis.
• →Compliance: Lead alignment with security and compliance frameworks such as SOC 2 and ISO 27001, and support client security assessments and questionnaires.
• →AI Systems Security: Assess and secure AI/ML and LLM-based systems, including data access, model serving, and integrations.
• →Policies & Awareness: Write and maintain security policies and run security awareness initiatives for the team.
• →Vendor Risk: Evaluate the security of third-party tools and providers before adoption.

• Experience: 7+ years in cybersecurity, security engineering, or a closely related role (mandatory).
• Cloud Security: Deep, hands-on experience securing AWS, GCP, or Azure environments.
• Identity & Access: Strong experience with IAM, Active Directory, MFA, and access control design.
• Network Security: Solid knowledge of firewalls, VPNs, network segmentation, and secure network design.
• DevSecOps: Hands-on experience integrating security into CI/CD pipelines and containerized environments (Docker, Kubernetes).
• Monitoring & Response: Experience with SIEM, EDR, and leading incident response.
• Vulnerability Management: Experience with vulnerability scanning and penetration testing tools and practices.
• Compliance: Practical experience with SOC 2, ISO 27001, or similar frameworks.
• Scripting: Python, Bash, and/or PowerShell for security automation.
• AI Security (Preferred): Experience assessing or securing AI/ML or LLM-based systems.
• Certifications (Preferred): CISSP, CISM, OSCP, or cloud security certifications (AWS, Azure, or GCP).
• Language: Advanced English, spoken and written (B2 or higher).
• Mindset: A pragmatic decision-maker who balances strong security with the needs of a fast-moving software team, and stays deeply hands-on.
• Location/Communication: Based in Mexico and comfortable supporting a global team across different time zones (US, Mexico, India).