DevSecOps Engineer

This is a fully remote position, open to applicants in Argentina, +4 more states.

📋 Description

• Safeguard and fortify cloud infrastructure, applications, APIs, internal systems, and operational workflows.

• Establish and uphold security measures across production environments, CI/CD pipelines, cloud infrastructure, and internal tools.

• Address vulnerabilities and enhance secure development practices in collaboration with engineering teams.

• Oversee encryption, secrets management, logging, monitoring, and access controls.

• Architect and refine security frameworks for cloud-native and distributed systems.

• Discover, evaluate, prioritize, and resolve vulnerabilities within infrastructure, applications, APIs, and operational systems.

• Execute vulnerability assessments, penetration testing, adversarial testing, threat modeling, and manual security evaluations.

• Coordinate remediation efforts, confirm fixes, and develop long-term mitigation strategies.

• Enhance detection and prevention capabilities for emerging threats.

• Secure AI-driven systems and automated agents against prompt injection, adversarial inputs, unauthorized actions, unsafe outputs, and data leakage.

• Create guardrails and validation layers for AI-generated actions.

• Monitor AI behavior for irregularities, abuse attempts, and unsafe decision-making.

• Ensure AI systems are observable, auditable, contained, and designed for safe failure.

• Advance security monitoring, alerting, logging, and incident response capabilities.

• Investigate suspicious activities, anomalies, and potential security incidents.

• Lead or support incident response, root cause analysis, and remediation planning.

• Suggest preventative measures following incidents or security discoveries.

• Collaborate with Compliance and Operations to fulfill SOC 2, PCI DSS, and financial and consumer data security standards.

• Assist in audit preparations, evidence gathering, security documentation, and control validation.

• Engage in risk assessments, control reviews, and remediation planning.

• Participate in customer and partner due diligence activities.

• Respond to technical security inquiries from customers, financial institutions, prospects, partners, auditors, and assessors.

• Complete security questionnaires, RFPs, and vendor risk assessments.

• Articulate security architecture, operational controls, monitoring capabilities, and security practices.

• Collaborate with Engineering, Product, Compliance, Operations, and Leadership teams.

• Contribute to architecture reviews, security planning, engineering roadmaps, and operational processes.

• Integrate security-first practices into the engineering and operational culture.

• Balance security, reliability, scalability, and business agility.

⛳️ Requirements

• Over 5 years of hands-on experience in security engineering, infrastructure security, application security, DevSecOps, vulnerability management, or offensive security.

• In-depth knowledge of the AWS ecosystem.

• Proven experience in identifying and remediating vulnerabilities in production systems.

• Working familiarity with SOC 2, PCI, and FinTech security best practices.

• Capability to drive projects, make decisions, and prioritize in a dynamic environment.

• Excellent communication skills to convey complex systems to engineering and business stakeholders.

• Experience in securing AI/LLM-powered systems or automated agents is preferred.

• Familiarity with prompt injection attacks, adversarial AI techniques, AI guardrails, validation systems, and behavioral anomaly detection is preferred.

• Experience with cloud security tools, SIEM, observability platforms, penetration testing tools, endpoint security platforms, and infrastructure-as-code security is preferred.

• Prior experience in high-growth startups, FinTech, banking, or payments is preferred.

• CISSP, CISM, AWS Security Specialty, or similar certifications are preferred.

🏝️ Benefits

• Paid Time Off

• Mentored Career Development

• U.S. Holidays

• USD Remuneration

• Profit Sharing

• Maternity Coverage

• 100% Remote