Senior Security Engineer, Detection & Response

This is a fully remote position, open to applicants in Colombia.

📋 Description

• Develop, maintain, and enhance SIEM/XDR functions, encompassing log ingestion, detection rules, alert tuning, and investigation processes.

• Create detection strategies to identify suspicious behavior and data exfiltration through application and database telemetry.

• Broaden audit and attribution coverage across Kubernetes, databases, SSO, and access-path telemetry.

• Analyze and respond to security incidents within cloud infrastructure and applications.

• Conduct root cause analyses and implement long-term solutions.

• Execute proactive threat hunting across cloud and identity environments.

• Establish repeatable agentic threat-hunting procedures.

• Manage vulnerability assessments across infrastructure, platforms, and applications.

• Evaluate and confirm external security findings, including bug bounty submissions.

• Collaborate with engineering teams for remediation efforts.

• Participate in threat modeling and security design evaluations.

• Provide guidance to teams on AWS and Kubernetes remediation strategies.

• Enforce controls that align with PCI DSS, SOC 2, and other compliance standards.

• Create automation, including AI integration, for security operations, detection, and response.

• Engage in the on-call rotation for detection and response as well as managed services.

• Report to the Director of Information Security and work closely with security platform, network, and zero-trust engineers.

⛳️ Requirements

• Over 6 years of experience in security, software, or infrastructure engineering.

• Practical experience securing cloud-based production environments.

• Familiarity with SIEM platforms such as Wazuh, Splunk, or ELK.

• Expertise in designing and optimizing detection rules, minimizing alert noise, and enhancing investigation processes.

• Extensive hands-on experience with vulnerability management, including scanning, triage, validation, remediation coordination, and verification.

• In-depth knowledge of AWS, Linux, and Kubernetes infrastructure.

• Proficient in investigating issues using logs, cloud tools, and system-level data.

• Experience evaluating detection and logging impacts during design reviews.

• Understanding of common security vulnerabilities and mitigation techniques, including OWASP and SANS guidelines.

• Familiarity with PCI DSS and SOC 2 compliance frameworks.

• Proven engineering skills using AI tools such as Claude Code, Codex, Cursor, or custom LLM integrations.

• Preferred qualifications include AI-assisted workflow development, log-based detection, telemetry pipelines, penetration testing, cloud-native security measures, container/dependency security tools, regulatory compliance, and experience in fintech or payments.

🏝️ Benefits

• Competitive gross salary ranging from $5,000 to $9,500 USD per month.

• Access to AI-assisted engineering tools and workflows.

• Technology environment focused on open-source solutions.

• Opportunity to engage in a collaborative and purpose-driven culture.

• Remote work option available for candidates in Latin America.