Cloud Security Engineer

Job not on LinkedIn

🕒 August 27

🇲🇽 Mexico – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 33%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

VALCE Talent Solutions

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2016

🤝 B2B

🎯 Recruiter

💼 Consulting

B2B • Recruitment • Consulting

VALCE Talent Solutions is a company specializing in nearshoring, IT talent acquisition, and consultancy aimed at helping businesses expand globally, particularly in Mexico, LATAM, and the United States. They offer customized solutions that include talent recruitment, workforce management, and the integration of technology and artificial intelligence to enhance business processes. With a strong focus on strategic consulting, VALCE aims to connect technology, talent, and tangible results, boasting a robust network of IT professionals and a proven track record of successful placements and project scaling.

📋 Description

• Own the full lifecycle of security findings and recommendations through triage, remediation, verification, and closure • Root-cause recurring issues and implement systemic fixes using policy-as-code, automated guardrails, and secure baselines • Track remediation SLAs and report on risk reduction and posture trends • Secure and govern authentication flows including OIDC, OAuth 2.0 with PKCE, JWT, and mTLS • Administer and harden Microsoft Entra ID, including app registrations, Enterprise Application permissions, consent governance, service principals, managed identities, credential hygiene, and least-privilege scoping • Design, implement, and tune Conditional Access policies • Build and enforce Azure Policy and Terraform guardrails • Maintain secure-by-default infrastructure-as-code baselines and detect/remediate configuration drift • Operate Microsoft Defender for Cloud, improve secure score, remediate recommendations, and manage CSPM • Contribute to security governance, standards, control definitions, exception handling, and audit evidence • Secure cloud and SaaS administrative portals • Strengthen privileged access with MFA, PIM/just-in-time elevation, role minimization, and break-glass procedures • Apply security controls to AI workloads, services, and agents, including identity, permission scoping, data-exposure, and prompt-injection risks

🎯 Requirements

• 5+ years in cloud security or security engineering, with deep, hands-on Azure experience • Strong, hands-on Microsoft Entra ID expertise: app registrations, Enterprise Apps, permissions and consent, and Conditional Access • Solid working knowledge of modern authentication: OIDC, OAuth 2.0 / PKCE, JWT, and mTLS • Proficiency with Terraform and Azure Policy for policy-as-code and automated guardrails • Experience with Microsoft Defender for Cloud and cloud security posture management • A demonstrable track record of root-causing and permanently closing security findings—not just patching them • Working understanding of AI, AI agents, and AI security considerations • Advanced English • Nice to have: Multi-cloud exposure (AWS, GCP) • Nice to have: Relevant certifications (e.g., Microsoft SC-100, AZ-500, SC-300; CISSP) • Nice to have: Experience with CI/CD pipeline security, secrets management, and SIEM/SOAR • Nice to have: Scripting/automation (PowerShell, Python) • Nice to have: Hands-on experience securing LLM-based or agentic systems in production