Senior Security Engineer, Detection & Response

This is a fully remote position, open to applicants in Mexico.

📋 Description

• Develop, manage, and enhance SIEM/XDR functionalities, involving log ingestion, detection rules, alert tuning, and investigative workflows.

• Create detection methodologies for identifying suspicious activities and data exfiltration utilizing application and database telemetry.

• Expand audit and attribution coverage throughout Kubernetes, databases, SSO, and access pathways, ensuring compliant data retention.

• Analyze and address security incidents across cloud infrastructures and applications.

• Conduct root cause analyses and implement long-term remediation strategies.

• Engage in proactive threat hunting across cloud and identity sectors.

• Establish repeatable and effective threat-hunting workflows.

• Manage vulnerability across infrastructures, platforms, and applications.

• Assess and confirm external security findings and bug-bounty submissions.

• Collaborate with engineering teams for remediation efforts.

• Contribute to threat modeling and security architecture reviews.

• Utilize AWS and Kubernetes expertise to fortify systems and provide guidance to owning teams.

• Support security measures in alignment with PCI DSS, SOC 2, and other compliance standards.

• Create automation solutions, including AI, for security operations, detection, and incident response.

• Participate in the on-call rotation for detection, response, and owned services.

• Report to the Director of Information Security and work alongside security platform, network, and zero-trust engineers.

⛳️ Requirements

• A minimum of 6 years of experience in security, software, or infrastructure engineering.

• Practical experience in securing cloud-based production environments.

• Familiarity with SIEM platforms such as Wazuh, Splunk, or ELK.

• Expertise in designing and refining detection rules, minimizing alert noise, and enhancing investigative workflows.

• Strong hands-on experience in vulnerability management, including scanning, triage, validation, remediation coordination, and verification.

• In-depth knowledge of AWS, Linux, and Kubernetes infrastructure, including security architecture and operational best practices.

• Capability to investigate issues using logs, cloud tools, and system-level data.

• Experience in evaluating detection and logging considerations during design reviews.

• Understanding of common security vulnerabilities and mitigation techniques, including OWASP and SANS frameworks.

• Familiarity with PCI DSS and SOC 2 compliance frameworks.

• Demonstrated experience using AI tools such as Claude Code, Codex, Cursor, or custom LLM integrations.

• Preferred qualifications include AI-assisted workflow development, log-based detection, telemetry pipelines, internal penetration testing, cloud-native security controls, container and dependency security tools, regulatory compliance alignment, and experience in fintech/payments.

🏝️ Benefits

• A competitive gross salary ranging from $5,000 to $9,500 USD per month, dependent on experience level.

• Integration of AI-assisted engineering and agentic workflows as part of standard operational practices.

• A technology environment focused on open-source solutions.

• Opportunity for full-time remote work within Mexico.