Senior Cybersecurity Engineer

Salvo Software is a global technology company specializing in custom software development and advanced engineering solutions. With distributed teams across the US, LATAM, and India, we partner with clients to build high-performance, scalable systems that solve complex technical challenges. Our culture values innovation, ownership, and engineering excellence.

Role Overview

We are seeking a Senior Cybersecurity Engineer to own the security posture of our cloud environments, internal systems, and distributed workforce. You will design and implement security controls, protect sensitive client and OEM data, and make sure our infrastructure and delivery pipelines meet the standards our partners expect.

This role collaborates closely with our DevOps Engineer and Technical Support Specialist, setting the security standards their work follows and providing technical guidance on security matters across the company.

Key Responsibilities

• Security Architecture: Design and maintain security architecture across cloud (AWS, GCP, Azure), on-prem, and endpoint environments, applying Zero Trust principles.
• Identity & Access Management: Define and enforce identity, access, and least-privilege policies across Active Directory, cloud IAM, VPNs, and internal tools, including strict project-based access to sensitive, licensed OEM data.
• Cloud Security: Assess and harden cloud configurations, manage secrets, and monitor for misconfigurations and policy drift.
• DevSecOps: Integrate security into CI/CD pipelines, including code and dependency scanning, container image scanning, secrets detection, and secure pipeline design.
• Network Security: Define and review configurations for firewalls, routers, switches, and VPNs to keep office locations and remote users secure.
• Endpoint Security: Set standards for endpoint protection (EDR), patching, disk encryption, and MFA across all company devices.
• Vulnerability Management: Run regular vulnerability scans and penetration tests, prioritize findings, and drive remediation.
• Security Monitoring: Implement and manage logging, SIEM, and alerting to detect and investigate suspicious activity.
• Incident Response: Own incident response plans and lead investigation, containment, and post-incident analysis.
• Compliance: Lead alignment with security and compliance frameworks such as SOC 2 and ISO 27001, and support client security assessments and questionnaires.
• AI Systems Security: Assess and secure AI/ML and LLM-based systems, including data access, model serving, and integrations.
• Policies & Awareness: Write and maintain security policies and run security awareness initiatives for the team.
• Vendor Risk: Evaluate the security of third-party tools and providers before adoption.

Requirements

• Experience: 7+ years in cybersecurity, security engineering, or a closely related role (mandatory).
• Cloud Security: Deep, hands-on experience securing AWS, GCP, or Azure environments.
• Identity & Access: Strong experience with IAM, Active Directory, MFA, and access control design.
• Network Security: Solid knowledge of firewalls, VPNs, network segmentation, and secure network design.
• DevSecOps: Hands-on experience integrating security into CI/CD pipelines and containerized environments (Docker, Kubernetes).
• Monitoring & Response: Experience with SIEM, EDR, and leading incident response.
• Vulnerability Management: Experience with vulnerability scanning and penetration testing tools and practices.
• Compliance: Practical experience with SOC 2, ISO 27001, or similar frameworks.
• Scripting: Python, Bash, and/or PowerShell for security automation.
• AI Security (Preferred): Experience assessing or securing AI/ML or LLM-based systems.
• Certifications (Preferred): CISSP, CISM, OSCP, or cloud security certifications (AWS, Azure, or GCP).
• Language: Advanced English, spoken and written (B2 or higher).
• Mindset: A pragmatic decision-maker who balances strong security with the needs of a fast-moving software team, and stays deeply hands-on.
• Location/Communication: Based in Mexico and comfortable supporting a global team across different time zones (US, Mexico, India).