AppSec Engineer - LATAM

Required Skills & Experience

Required Skills & Experience

• 5+ years of experience in Application Security, Product Security, or related security engineering roles.
• Development experience and the ability to work closely with software engineering teams.
• Experience securing APIs, web applications, microservices, and service-to-service communications.
• Experience partnering directly with application teams and business stakeholders to resolve customer-impacting issues.
• Experience designing observability solutions using logs, traces, metrics, and event streams in platforms such as Langfuse, Grafana, Dynatrace, or Splunk.
• Strong AI scripting and automation skills.
• Direct knowledge of microservices, REST APIs, GraphQL, and event-driven architectures.
• Experience with GraphQL security, AI application security, LLMs, and agentic platforms.
• Experience performing application security assessments, threat modeling, vulnerability analysis, and remediation activities.

Nice to Have Skills & Experience

Nice to Have

• Experience with Akamai Application Security, API Security, Bot Manager, or equivalent application security platforms.
• Experience with agentic coding platforms, AI-assisted development, and LLM integrations.
• Experience conducting secure code reviews and working within secure SDLC environments.
• Experience with SAST, DAST, software composition analysis (SCA), and application security tooling.

Job Description

Job Summary We are seeking an AI Application Security Engineer to secure enterprise microservices and APIs across web and mobile environments. This role requires a strong collaborative focus, partnering with stakeholders across business and engineering teams to understand application workflows, investigate issues, and implement secure solutions. The ideal candidate will work closely with application teams, product owners, and business stakeholders. The primary focus is improving the security and observability of enterprise applications, APIs, and AI-enabled services through modern application security practices, AI-powered analysis, automation, and governance. This person should be an Application Security-first engineer with experience securing modern applications, APIs, microservices, and AI-powered services.

Key Responsibilities

• Implement security controls protecting web applications, APIs, microservices, and AI-enabled services.
• Leverage AI and automation to analyze telemetry, application logs, security events, Akamai traffic data, and observability platforms to identify application and API issues.
• Design and implement observability for microservice REST and GraphQL APIs and application workflows.
• Identify and mitigate risks associated with exposed application endpoints, APIs, and publicly accessible services.
• Partner directly with engineering, product, and business teams to communicate findings, risks, mitigation plans, and recovery status.
• Develop operational runbooks and troubleshooting procedures for recurring application, endpoint, and API issues.
• Support secure software development practices through application security reviews, threat analysis, and vulnerability remediation.