Application Security Engineer
At Definity, a leading technology company focused on AI-driven solutions and digital transformation, we are continuously expanding our team to support innovative, high-impact projects. We are seeking an Application Security Engineer. This is a fully remote position open to candidates across LATAM.
Requirements
5+ years of experience in Application Security, Product Security, or DevSecOps, working hands-on with engineering teams.
Strong AppSec tooling experience: SAST, SCA, code scanning, GitHub / GitHub Advanced Security / SonarQube / Dependabot, and CI/CD integration.
Ability to read code, assess real risk, and drive practical remediation.
SSDLC / shift-left skills: threat modeling, security design reviews, vulnerability management.
Strong application and API security fundamentals: authN/authZ, secrets, dependencies, injection, data protection.
Experience with cloud-native delivery: containers, IaC, Git-based workflows, automation, and clear documentation.
Advanced English.
Nice to have
IaC scanning, container/image security, software supply chain, secrets management.
AWS cloud security experience.
Experience in regulated, audit-sensitive, or event-critical environments.
Main Activities
Partner directly with engineering teams to identify and remediate application-level security risks.
Integrate and maintain AppSec tooling (SAST, SCA, code scanning) within CI/CD pipelines.
Conduct security design reviews and threat modeling for new features and services.
Review code to assess real-world risk and provide clear, actionable remediation guidance.
Support vulnerability management processes, prioritizing based on actual risk.
Document findings, processes, and recommendations clearly for both technical and non-technical stakeholders.
Education
Bachelor's Degree in Computer Science, Information Systems, Engineering, or related field.
About Definity
Founded in Monterrey, Mexico, Definity is a nearshore technology partner specializing in custom digital solutions, AI innovation, and business applications. With over two decades of expertise and a strong focus on client success, Definity empowers organizations worldwide to achieve real business results through modern technology.
Definity is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, pregnancy, veteran status, or disability status.
Requirements
5+ years of experience in Application Security, Product Security, or DevSecOps, working hands-on with engineering teams.
Strong AppSec tooling experience: SAST, SCA, code scanning, GitHub / GitHub Advanced Security / SonarQube / Dependabot, and CI/CD integration.
Ability to read code, assess real risk, and drive practical remediation.
SSDLC / shift-left skills: threat modeling, security design reviews, vulnerability management.
Strong application and API security fundamentals: authN/authZ, secrets, dependencies, injection, data protection.
Experience with cloud-native delivery: containers, IaC, Git-based workflows, automation, and clear documentation.
Advanced English.
Nice to have
IaC scanning, container/image security, software supply chain, secrets management.
AWS cloud security experience.
Experience in regulated, audit-sensitive, or event-critical environments.
Main Activities
Partner directly with engineering teams to identify and remediate application-level security risks.
Integrate and maintain AppSec tooling (SAST, SCA, code scanning) within CI/CD pipelines.
Conduct security design reviews and threat modeling for new features and services.
Review code to assess real-world risk and provide clear, actionable remediation guidance.
Support vulnerability management processes, prioritizing based on actual risk.
Document findings, processes, and recommendations clearly for both technical and non-technical stakeholders.
Education
Bachelor's Degree in Computer Science, Information Systems, Engineering, or related field.
About Definity
Founded in Monterrey, Mexico, Definity is a nearshore technology partner specializing in custom digital solutions, AI innovation, and business applications. With over two decades of expertise and a strong focus on client success, Definity empowers organizations worldwide to achieve real business results through modern technology.
Definity is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, pregnancy, veteran status, or disability status.