Job Closed
This listing is no longer active.
Infraestructura financiera para tu empresa, escalable en un solo lugar.
Application Security Engineer
Location
Mexico
Posted
4 days ago
Salary
0
Seniority
Senior
Job Description
Application Security Engineer
Monato
• Ejecutar pruebas de penetración sobre los aplicativos de Monato (Pagos, Finch, Conciliación y APIs internas y externas), cubriendo lógica de negocio, autenticación y OWASP Top 10, y coordinando pentests con proveedores externos. • Operar el programa de bug bounty, definiendo scope y reglas de engagement, haciendo triage de reportes y coordinando la remediación con los equipos de producto. • Construir el track Secure SDLC, integrando SAST, SCA, secret scanning, SBOM y firma de imágenes (Cosign + SLSA) en los pipelines de CI/CD para bloquear problemas antes del merge. • Evaluar la seguridad de los sistemas de IA y agentes, probando prompt injection, tool poisoning, RAG poisoning y abuso de workflows agénticos con base en OWASP LLM Top 10 y MITRE ATLAS. • Validar las detecciones del Blue Team, ejecutando simulaciones de TTPs del sector financiero (framework ATT&CK, BAS continuo) y ejercicios Purple Team con informe mensual de cobertura. • Producir threat models de los componentes críticos (pipeline de pagos, APIs externas, sistemas de IA), participando en revisiones de arquitectura y reportando al CISO el cumplimiento del Secure SDLC.
Job Requirements
- 4+ años de experiencia en Application Security, Penetration Testing o Red Team, con enfoque en aplicaciones web, APIs y entornos cloud.
- Experiencia ejecutando pruebas de penetración en aplicaciones financieras o de pagos: lógica de negocio, autorización y flujos de transacción.
- Experiencia práctica atacando o evaluando sistemas que usan LLMs y agentes (prompt injection, jailbreaking, tool poisoning, data leakage), con OWASP LLM Top 10 y MITRE ATLAS como marcos de referencia.
- Experiencia integrando SAST/SCA (Semgrep, CodeQL, Snyk o equivalente) y secret scanning (GitGuardian, TruffleHog) en pipelines de CI/CD con GitHub Actions o equivalente.
- Dominio de Burp Suite Pro y scripting en Python para automatización de pruebas y análisis de resultados.
- Conocimiento práctico de OWASP Top 10, OWASP API Security Top 10 y arquitecturas cloud (AWS) desde la perspectiva de un atacante.
- Experiencia con herramientas de simulación adversarial: Atomic Red Team, Caldera, AttackIQ o SafeBreach.
- Haber operado o participado activamente en un programa de bug bounty, desde el triage o el hunting.
- Hallazgos críticos en sistemas de IA en producción (CVE, writeup o CTF), historial en HackerOne/Bugcrowd en fintech, o certificaciones OSCP, OSWE, BSCP, GWAPT o GPEN (nice to have).
Benefits
- Un rol con ownership real sobre el track Secure SDLC y la validación ofensiva del programa de seguridad.
- Exposición directa a la infraestructura de pagos B2B en México y a la seguridad de sistemas de IA en producción.
- Espacio para experimentar, proponer y construir.
- Crecimiento profesional acelerado dentro de una fintech en etapa de construcción y escala.
- Cultura de trabajo flexible y enfocada en ejecución.
Related Guides
Related Categories
Related Job Pages
More Application Engineer Jobs
Notice Applicants must submit both a resume and a cover letter (in MS Word or PDF format; free format). Required documents: - Resume in Korean - Cover letter in Korean - Resume in English - Cover letter in English If any information provided in the submitted documents is found to be false, the offer of employment may be withdrawn or employment may be terminated. Eligible veterans will be given preference in accordance with relevant laws and regulations. Job Purpose and Impact - This role goes beyond traditional application development, serving as a critical bridge between business and technology while aligning with global Digital Technology & Data strategies. The position will lead digital initiatives across manufacturing and commercial functions, enabling meaningful business impact through technology. Key Accountabilities - Lead end-to-end digital transformation initiatives in Korea business(ANH) aligned with global Digital Technology & Data strategies - Analyze business requirements and design/implement digital and application solutions - Act as a bridge between business and IT, collaborating with key stakeholders to drive projects - Enhance system adoption across manufacturing and commercial teams to support data-driven decision-making - Collaborate with global and cross-functional teams to drive execution and lead change management - Other duties as assigned Qualifications - Bachelor's degree or higher in Computer Science, Engineering, or a related field - Minimum of 10 years of experience in IT/Digital-related roles - Proven experience leading end-to-end digital transformation projects - Ability to communicate effectively in English in a business environment Preferred Qualifications - Experience with enterprise systems such as ERP or CRM - Experience in manufacturing or relevant industries - Experience working in global or cross-functional environments - Strong stakeholder management and communication skills with the ability to bridge business and IT
Staff Applications Engineer
Antora EnergyWe are electrifying heavy industry with zero-carbon heat and power.
• Serve as the technical lead for customer opportunities across industrial heat, combined heat & power, and power applications, joining business development on sales calls and owning the technical conversation with customer engineering/operations teams and executives • Run technical discovery: own customer data requests (load profiles, steam conditions, utility data, plot plans, one-lines) and site walkdowns; validate opportunity screens for standard applications and run first-pass technical screening for novel ones • Size and configure Antora's product for each site within its configurable envelope, creatively optimizing trade-offs across performance, cost, and site constraints • Produce conceptual site layouts, heat integration designs, and site boundary-condition definitions • Own the product-side electrical configuration and manage the product-to-interconnection interface with our energy/interconnection team • Own proposal-stage configuration analysis and cost estimates supporting letters of intent, term sheets, and internal investment approvals • Support RFP/RFI responses; anticipate and resolve customer technical objections to keep deals moving • Support commercial negotiations with technical exhibits and performance guarantees for LOIs and term sheets with sharp judgment on the economic implications of design choices and guarantees we commit to • Prepare basis-of-design handoff packages (configuration specs, layouts, integration concepts, assumptions, and risks) that enable project engineering to pick up projects cleanly for detailed design (FEED and beyond) • Channel voice-of-customer and market intel back to product management to sharpen the product and roadmap • Scale the applications engineering function: partner with our software and AI team to build tools to automate processes such as layouts, drawings, and cost estimates; mentor and help grow a small team of applications engineers over time • Typical travel of ~25%, potentially including some international travel
Senior Director, Application Engineering
SkillsoftWe propel organizations and people to grow together through transformative learning experiences.
• Own engineering delivery and operational health for the enterprise applications portfolio supporting critical business capabilities and processes • Translate approved business solutions into scalable, maintainable engineering execution plans • Ensure delivery aligns to business priorities, architecture standards, security requirements, and governance frameworks • Partner with PMO and Solutions leaders on prioritization, capacity planning, sequencing, and execution transparency • Drive consistent execution that balances run, enhancement, and transformation initiatives • Lead end-to-end lifecycle management, including build, release, operate, enhance, and retire • Ensure high availability, reliability, and performance of production systems • Oversee incident, problem, and change management processes • Maintain a strong focus on operational resilience, uptime, and business continuity • Drive structured lifecycle planning including upgrades, patching, and decommissioning of legacy systems • Reduce application complexity through rationalization, standardization, and modernization • Drive adoption of AI-assisted engineering practices to improve productivity, quality, and cycle time • Enable automation-first delivery across testing, deployment, and operational processes • Partner across teams to streamline workflows, reduce manual effort, and lower total cost of ownership • Identify and scale opportunities for AI and automation within enterprise applications in a controlled manner • Ensure adherence to enterprise architecture, security, and engineering standards • Support compliance requirements including audit readiness (e.g., SOX where applicable) • Maintain disciplined release, change, and environment controls • Ensure solutions are well-documented, testable, and supportable • Partner with Security and Risk teams to proactively mitigate technical and operational risks • Build and lead a high-performing, modern engineering organization • Develop a skills-based team with strong capabilities across platforms, automation, quality, and AI • Define clear roles, responsibilities, goals, and development plans • Foster a culture of accountability, continuous improvement, and enterprise thinking • Develop talent that can operate across technologies and business domains • Build strong, trust-based partnerships with business stakeholders and cross-functional IT teams • Ensure delivery outcomes translate into measurable business impact • Support adoption and value realization post-implementation • Contribute to a management cadence that tracks outcomes beyond deployment • Communicate clearly with senior stakeholders on progress, risks, and value delivered
• Researching, diagnosing, troubleshooting and identifying solutions to resolve system issues • Taking ownership of customer issues reported and seeing problems through to resolution • Track computer system issues through to resolution, within agreed time limits • Properly escalate unresolved issues to appropriate internal teams (e.g. PMs & software developers) • Provide prompt and accurate feedback to customers. • Refer to internal database or external resources to provide accurate tech solutions. • Prioritize and manage several open issues at one time • Document technical knowledge in the form of notes and manuals.




