Senior Security Engineer, Client Security Lead

This is a fully remote position, open to applicants in Argentina, +6 more countries.

📋 Description

• Ensure the security of OneSeven Tech’s internal systems while integrating security engineering within client software.

• Conduct threat modeling, secure design evaluations, and architectural assessments.

• Incorporate SAST, SCA, secret scanning, IaC checks, and DAST into development processes.

• Organize and execute authorized penetration tests, attack surface evaluations, and scoped red teaming activities.

• Evaluate AI-driven applications and agents for issues like prompt injection, data exposure, excessive permissions, and cross-client data access.

• Implement and fine-tune EDR/XDR, SIEM, detection mechanisms, and SOAR playbooks.

• Facilitate threat hunting and purple team exercises.

• Lead incident triage, containment, and recovery efforts while keeping clients informed.

• Oversee internal IT operations, including onboarding/offboarding, SSO/MFA, access reviews, device management, and SaaS administration.

• Serve as the primary security liaison for clients through discovery calls, scoping, assessment presentations, remediation workshops, and executive reporting.

• Collaborate with leadership to develop repeatable security services, playbooks, templates, scoping, effort estimates, and pricing strategies.

• Transform security initiatives into productized cybersecurity services.

⛳️ Requirements

• Hands-on experience with application and cloud security, focusing on web/API vulnerabilities, authorization, identity management, secure development, and remediation.

• Proven track record of conducting authorized penetration testing and implementing defensive controls, monitoring (EDR/SIEM), and incident response procedures.

• Practical experience in internal IT administration, including SSO/MFA, employee access management, endpoints, business SaaS, and user support.

• Capability to assess and utilize AI-assisted security tools and agents with the necessary authorization, containment measures, output verification, and audit trails.

• Proficiency in automation through scripting, APIs, or infrastructure-as-code methodologies.

• Excellent client-facing writing and presentation abilities in English.

• Skill in translating technical tasks into repeatable processes, clearly defined services, and quantifiable results.

• Experience in consulting, multi-client delivery, managed security services, or cybersecurity service development (preferred).

• Familiarity with AI/LLM security, adversary emulation, purple teaming, detection engineering, and SOAR (preferred).

• Background in brownfield modernization and greenfield product development (preferred).

• Knowledge of OWASP ASVS, MITRE ATT&CK, and NIST CSF (preferred).

• Relevant practical certifications (preferred).

• LinkedIn Profile URL required.

• GitHub Repository required.

• Resume in English required.

🏝️ Benefits

• Monthly salary of $7000–$8000 USD, paid bi-weekly in USD via Deel.

• Fully remote work opportunity — operate from anywhere in Latin America.

• Long-term contract starting with a 6-month term, transitioning to full-time.

• Paid Paid Time Off (PTO).

• Referral Program — earn bonuses for referring candidates who are hired.