Senior Security Engineer, Platforms & AI

• Harden cloud infrastructure, APIs, internal tools, and CI/CD pipelines through effective encryption, secrets management, logging, identity, and access controls.

• Identify, assess, prioritize, and remediate vulnerabilities across production systems, ensuring issues are driven through to resolution rather than simply documented.

• Conduct vulnerability scanning, penetration testing, adversarial testing, threat modeling, manual security reviews, and related offensive security activities.

• Design and implement security controls for AI and agentic systems, including defenses against prompt injection, adversarial inputs, unauthorized actions, unsafe outputs, and data leakage.

• Own the ongoing automated security, cost, and architecture audit process, including defining checks, severity criteria, accuracy, and monitoring cadence.

• Establish monitoring and detection capabilities, investigate suspicious activity, lead incident containment and root-cause analysis, and implement preventative fixes.

• Work directly within client environments, repositories, tooling, and compliance processes while maintaining strong security practices and clear accountability.

• Collaborate closely with engineers and stakeholders to establish practical security requirements early in the development lifecycle and continuously improve the security posture of production systems.

• Use modern AI-assisted engineering tools as part of day-to-day security and development workflows.

Requirements

• 7 years of hands-on experience in security engineering, infrastructure security, application security, DevSecOps, or offensive security.

• Strong engineering fundamentals, including experience with security testing, code review, CI/CD, Git, containers, and API design.

• Deep and current knowledge of AWS and the ability to apply cloud security principles effectively in production environments.

• Demonstrated experience identifying, investigating, and remediating vulnerabilities in live production systems.

• Hands-on experience securing AI or LLM-powered systems or automated agents, particularly around prompt injection, adversarial inputs, unauthorized actions, unsafe outputs, and data leakage.

• Active experience using AI-assisted coding and engineering tools such as Claude Code, Cursor, GitHub Copilot, or comparable solutions.

• Strong understanding of prompt-injection attacks, adversarial AI techniques, AI guardrails, and behavioral anomaly detection is highly valuable.

• Experience with cloud security tooling, SIEM and observability platforms, penetration testing tools, endpoint security, and infrastructure-as-code security using technologies such as Terraform or Bicep.

• Experience working under compliance frameworks such as SOC 2 or HIPAA is an advantage.

• Strong written and verbal communication skills, with the ability to explain technical findings clearly to engineers and communicate directly with clients.

• Professional English proficiency at approximately B2/C1 level or above.

• Bachelor’s degree in Computer Science, Information Security, or a related discipline, or equivalent professional experience.

• Experience in high-growth startups, fintech, banking, payments, or similarly demanding environments is a plus.

• Relevant certifications such as CISSP, CISM, AWS Security Specialty, or equivalent are advantageous.

• Contributions to open-source security projects, technical publications, or active involvement in the security community are welcome.

Benefits

• 100% remote-first work environment, with the ability to work from anywhere in Latin America.

• U.S. dollar-based remuneration.

• Paid time off (PTO).

• U.S. public holidays.

• Maternity coverage.

• AI training and certification opportunities.

• Mentored career development.

• Profit-sharing opportunities.

• Exposure to modern AI engineering, security technologies, and production-scale systems.