Salvo Software is a global technology company specializing in custom software development and advanced engineering solutions. With distributed teams across the US, LATAM, and India, we partner with clients to build high-performance, scalable systems that solve complex technical challenges. Our culture values innovation, ownership, and engineering excellence.
Role Overview
We are seeking a Senior Cybersecurity Engineer to own the security posture of our cloud environments, internal systems, and distributed workforce. You will design and implement security controls, protect sensitive client and OEM data, and make sure our infrastructure and delivery pipelines meet the standards our partners expect.
This role collaborates closely with our DevOps Engineer and Technical Support Specialist, setting the security standards their work follows and providing technical guidance on security matters across the company.
Key Responsibilities
- Security Architecture: Design and maintain security architecture across cloud (AWS, GCP, Azure), on-prem, and endpoint environments, applying Zero Trust principles.
- Identity & Access Management: Define and enforce identity, access, and least-privilege policies across Active Directory, cloud IAM, VPNs, and internal tools, including strict project-based access to sensitive, licensed OEM data.
- Cloud Security: Assess and harden cloud configurations, manage secrets, and monitor for misconfigurations and policy drift.
- DevSecOps: Integrate security into CI/CD pipelines, including code and dependency scanning, container image scanning, secrets detection, and secure pipeline design.
- Network Security: Define and review configurations for firewalls, routers, switches, and VPNs to keep office locations and remote users secure.
- Endpoint Security: Set standards for endpoint protection (EDR), patching, disk encryption, and MFA across all company devices.
- Vulnerability Management: Run regular vulnerability scans and penetration tests, prioritize findings, and drive remediation.
- Security Monitoring: Implement and manage logging, SIEM, and alerting to detect and investigate suspicious activity.
- Incident Response: Own incident response plans and lead investigation, containment, and post-incident analysis.
- Compliance: Lead alignment with security and compliance frameworks such as SOC 2 and ISO 27001, and support client security assessments and questionnaires.
- AI Systems Security: Assess and secure AI/ML and LLM-based systems, including data access, model serving, and integrations.
- Policies & Awareness: Write and maintain security policies and run security awareness initiatives for the team.
- Vendor Risk: Evaluate the security of third-party tools and providers before adoption.
Requirements
- Experience: 7+ years in cybersecurity, security engineering, or a closely related role (mandatory).
- Cloud Security: Deep, hands-on experience securing AWS, GCP, or Azure environments.
- Identity & Access: Strong experience with IAM, Active Directory, MFA, and access control design.
- Network Security: Solid knowledge of firewalls, VPNs, network segmentation, and secure network design.
- DevSecOps: Hands-on experience integrating security into CI/CD pipelines and containerized environments (Docker, Kubernetes).
- Monitoring & Response: Experience with SIEM, EDR, and leading incident response.
- Vulnerability Management: Experience with vulnerability scanning and penetration testing tools and practices.
- Compliance: Practical experience with SOC 2, ISO 27001, or similar frameworks.
- Scripting: Python, Bash, and/or PowerShell for security automation.
- AI Security (Preferred): Experience assessing or securing AI/ML or LLM-based systems.
- Certifications (Preferred): CISSP, CISM, OSCP, or cloud security certifications (AWS, Azure, or GCP).
- Language: Advanced English, spoken and written (B2 or higher).
- Mindset: A pragmatic decision-maker who balances strong security with the needs of a fast-moving software team, and stays deeply hands-on.
- Location/Communication: Based in Mexico and comfortable supporting a global team across different time zones (US, Mexico, India).
Skills Required
- 7+ years of experience in cybersecurity, security engineering, or a closely related role
- Hands-on experience securing AWS, GCP, or Azure environments
- Strong experience with IAM, Active Directory, MFA, and access control design
- Knowledge of firewalls, VPNs, network segmentation, and secure network design
- Hands-on experience integrating security into CI/CD pipelines and containerized environments using Docker and Kubernetes
- Experience with SIEM, EDR, and leading incident response
- Experience with vulnerability scanning and penetration testing tools and practices
- Practical experience with SOC 2, ISO 27001, or similar frameworks
- Security automation experience using Python, Bash, and/or PowerShell
- Advanced English proficiency, spoken and written, at B2 level or higher
- Based in Mexico and comfortable supporting a global team across US, Mexico, and India time zones
- Experience assessing or securing AI/ML or LLM-based systems
- CISSP, CISM, OSCP, or AWS, Azure, or GCP cloud security certification
What We Do
We design custom-built solutions to help you transform, scale, and grow your business along with a team that cares about you. Salvo software is a global firm with near-shoring capabilities headquartered in Vancouver, WA. That provides cost-effective software solutions to guide enterprises and startups through digital transformation. We help our partners to improve their client’s customer experience and optimize their business process times by providing hand-selected teams of experts that meet their needs and help them to make smart decisions.
