Job Closed

This listing is no longer active.

Monato logo
Monato

Infraestructura financiera para tu empresa, escalable en un solo lugar.

Application Security Engineer

Application EngineerApplication EngineerFull TimeRemoteMid LevelTeam 51-200Since 2024H1B No SponsorCompany SiteLinkedIn

Location

Mexico

Posted

9 days ago

Salary

0

Seniority

Mid Level

Job Description

Application Security Engineer

Monato

Role Description Buscamos un/a Application Security Engineer que encuentre y reporte vulnerabilidades en las aplicaciones, APIs, pipelines de CI/CD y sistemas de IA de Monato antes de que lo haga un atacante, para proteger la infraestructura de pagos B2B que usan nuestros clientes. Buscamos un/a Application Security Engineer para ser el owner del track Secure SDLC y de la validación ofensiva del programa de seguridad, asegurando que las vulnerabilidades críticas se detecten y remedien antes de llegar a producción, y contribuyendo a que Monato opere una plataforma de pagos confiable y segura en un entorno regulado. Tasks - Ejecutar pruebas de penetración sobre los aplicativos de Monato (Pagos, Finch, Conciliación y APIs internas y externas), cubriendo lógica de negocio, autenticación y OWASP Top 10, y coordinando pentests con proveedores externos. - Operar el programa de bug bounty, definiendo scope y reglas de engagement, haciendo triage de reportes y coordinando la remediación con los equipos de producto. - Construir el track Secure SDLC, integrando SAST, SCA, secret scanning, SBOM y firma de imágenes (Cosign + SLSA) en los pipelines de CI/CD para bloquear problemas antes del merge. - Evaluar la seguridad de los sistemas de IA y agentes, probando prompt injection, tool poisoning, RAG poisoning y abuso de workflows agénticos con base en OWASP LLM Top 10 y MITRE ATLAS. - Validar las detecciones del Blue Team, ejecutando simulaciones de TTPs del sector financiero (framework ATT&CK, BAS continuo) y ejercicios Purple Team con informe mensual de cobertura. - Producir threat models de los componentes críticos (pipeline de pagos, APIs externas, sistemas de IA), participando en revisiones de arquitectura y reportando al CISO el cumplimiento del Secure SDLC. Qualifications - 4+ años de experiencia en Application Security, Penetration Testing o Red Team, con enfoque en aplicaciones web, APIs y entornos cloud. - Experiencia ejecutando pruebas de penetración en aplicaciones financieras o de pagos: lógica de negocio, autorización y flujos de transacción. - Experiencia práctica atacando o evaluando sistemas que usan LLMs y agentes (prompt injection, jailbreaking, tool poisoning, data leakage), con OWASP LLM Top 10 y MITRE ATLAS como marcos de referencia. - Experiencia integrando SAST/SCA (Semgrep, CodeQL, Snyk o equivalente) y secret scanning (GitGuardian, TruffleHog) en pipelines de CI/CD con GitHub Actions o equivalente. - Dominio de Burp Suite Pro y scripting en Python para automatización de pruebas y análisis de resultados. - Conocimiento práctico de OWASP Top 10, OWASP API Security Top 10 y arquitecturas cloud (AWS) desde la perspectiva de un atacante. - Experiencia con herramientas de simulación adversarial: Atomic Red Team, Caldera, AttackIQ o SafeBreach. - Haber operado o participado activamente en un programa de bug bounty, desde el triage o el hunting. - Hallazgos críticos en sistemas de IA en producción (CVE, writeup o CTF), historial en HackerOne/Bugcrowd en fintech, o certificaciones OSCP, OSWE, BSCP, GWAPT o GPEN (nice to have). Benefits - Un rol con ownership real sobre el track Secure SDLC y la validación ofensiva del programa de seguridad. - Exposición directa a la infraestructura de pagos B2B en México y a la seguridad de sistemas de IA en producción. - Espacio para experimentar, proponer y construir. - Crecimiento profesional acelerado dentro de una fintech en etapa de construcción y escala. - Cultura de trabajo flexible y enfocada en ejecución.

Related Categories

Related Job Pages

More Application Engineer Jobs

Prysmian logo

Applications Engineer

Prysmian

The world leader in energy and telecoms cable systems

Full TimeRemoteTeam 10,001+H1B Sponsor

• Providing technical support to Power Distribution customers in the Southeast United States • Working with territory sales managers to promote new and existing products • Assisting R&D in developing customer-centric new offerings and cost-savings opportunities • Providing technical responses to customer inquiries • Participating in major quotes and bids with key customers • Working with Design Engineering to provide product optimizations • Providing corrective action reports and responses to quality concerns • Participating in critical customer SRM meetings and customer scorecard reviews • Working closely with R&D to develop new products and cost-saving opportunities

Florida
Monato logo

Application Security Engineer

Monato

Infraestructura financiera para tu empresa, escalable en un solo lugar.

Full TimeRemoteTeam 51-200Since 2024H1B No Sponsor

• Ejecutar pruebas de penetración sobre los aplicativos de Monato (Pagos, Finch, Conciliación y APIs internas y externas), cubriendo lógica de negocio, autenticación y OWASP Top 10, y coordinando pentests con proveedores externos. • Operar el programa de bug bounty, definiendo scope y reglas de engagement, haciendo triage de reportes y coordinando la remediación con los equipos de producto. • Construir el track Secure SDLC, integrando SAST, SCA, secret scanning, SBOM y firma de imágenes (Cosign + SLSA) en los pipelines de CI/CD para bloquear problemas antes del merge. • Evaluar la seguridad de los sistemas de IA y agentes, probando prompt injection, tool poisoning, RAG poisoning y abuso de workflows agénticos con base en OWASP LLM Top 10 y MITRE ATLAS. • Validar las detecciones del Blue Team, ejecutando simulaciones de TTPs del sector financiero (framework ATT&CK, BAS continuo) y ejercicios Purple Team con informe mensual de cobertura. • Producir threat models de los componentes críticos (pipeline de pagos, APIs externas, sistemas de IA), participando en revisiones de arquitectura y reportando al CISO el cumplimiento del Secure SDLC.

Mexico
Job Closed
Cargill logo

Sr. Application Developer

Cargill

We are a family company providing food, ingredients, agricultural solutions and industrial products to nourish the world in a safe, responsible and sustainable way. We connect farmers with markets so they can prosper. We connect customers with ingredients so they can make meals people love. And we connect families with daily essentials— from eggs to edible oils, salt to skincare, feed to flooring. By providing customers with products that are vital for living, we help businesses grow, communities prosper and consumers live well in their daily lives.

Full TimeRemoteTeam 10,001+Since 1865H1B Sponsor

Notice Applicants must submit both a resume and a cover letter (in MS Word or PDF format; free format). Required documents: - Resume in Korean - Cover letter in Korean - Resume in English - Cover letter in English If any information provided in the submitted documents is found to be false, the offer of employment may be withdrawn or employment may be terminated. Eligible veterans will be given preference in accordance with relevant laws and regulations. Job Purpose and Impact - This role goes beyond traditional application development, serving as a critical bridge between business and technology while aligning with global Digital Technology & Data strategies. The position will lead digital initiatives across manufacturing and commercial functions, enabling meaningful business impact through technology. Key Accountabilities - Lead end-to-end digital transformation initiatives in Korea business(ANH) aligned with global Digital Technology & Data strategies - Analyze business requirements and design/implement digital and application solutions - Act as a bridge between business and IT, collaborating with key stakeholders to drive projects - Enhance system adoption across manufacturing and commercial teams to support data-driven decision-making - Collaborate with global and cross-functional teams to drive execution and lead change management - Other duties as assigned Qualifications - Bachelor's degree or higher in Computer Science, Engineering, or a related field - Minimum of 10 years of experience in IT/Digital-related roles - Proven experience leading end-to-end digital transformation projects - Ability to communicate effectively in English in a business environment Preferred Qualifications - Experience with enterprise systems such as ERP or CRM - Experience in manufacturing or relevant industries - Experience working in global or cross-functional environments - Strong stakeholder management and communication skills with the ability to bridge business and IT

South Korea
Antora Energy logo

Staff Applications Engineer

Antora Energy

We are electrifying heavy industry with zero-carbon heat and power.

Full TimeRemoteTeam 51-200H1B No Sponsor

• Serve as the technical lead for customer opportunities across industrial heat, combined heat & power, and power applications, joining business development on sales calls and owning the technical conversation with customer engineering/operations teams and executives • Run technical discovery: own customer data requests (load profiles, steam conditions, utility data, plot plans, one-lines) and site walkdowns; validate opportunity screens for standard applications and run first-pass technical screening for novel ones • Size and configure Antora's product for each site within its configurable envelope, creatively optimizing trade-offs across performance, cost, and site constraints • Produce conceptual site layouts, heat integration designs, and site boundary-condition definitions • Own the product-side electrical configuration and manage the product-to-interconnection interface with our energy/interconnection team • Own proposal-stage configuration analysis and cost estimates supporting letters of intent, term sheets, and internal investment approvals • Support RFP/RFI responses; anticipate and resolve customer technical objections to keep deals moving • Support commercial negotiations with technical exhibits and performance guarantees for LOIs and term sheets with sharp judgment on the economic implications of design choices and guarantees we commit to • Prepare basis-of-design handoff packages (configuration specs, layouts, integration concepts, assumptions, and risks) that enable project engineering to pick up projects cleanly for detailed design (FEED and beyond) • Channel voice-of-customer and market intel back to product management to sharpen the product and roadmap • Scale the applications engineering function: partner with our software and AI team to build tools to automate processes such as layouts, drawings, and cost estimates; mentor and help grow a small team of applications engineers over time • Typical travel of ~25%, potentially including some international travel

United States
$175K - $210K / year