Senior Software Engineer, Security Platform

This is a fully remote position, open to applicants in Argentina.

📋 Description

• Design, develop, and manage security engineering services primarily using Golang and Python on AWS and Kubernetes.

• Maintain, strengthen, and phase out existing services as necessary.

• Take ownership of the NATS-based event-driven platform, encompassing contracts, consumers, delivery assurances, and observability.

• Integrate scanners, systems of record for findings, tickets, and metrics.

• Oversee security gates for SAST, SCA, secret detection, container scanning, and Infrastructure as Code (IaC) scanning.

• Choose and optimize scanners, handle suppression workflows, minimize false positives, and implement enforcement gates.

• Develop CI review agents, automate finding triage and verification, and create remediation tools.

• Automate workflows from triage to remediation, including context for reproduction, guidance for fixes, and routing.

• Engage in threat modeling and secure design evaluations.

• Participate in the on-call rotation.

• Report to the Director of Information Security and work collaboratively with detection and response teams, as well as network and zero trust engineers.

⛳️ Requirements

• A minimum of 6 years of professional software engineering experience, with a strong focus on backend development.

• Recent deployment of significant changes to a production application within the last 30 days.

• Excellent proficiency in Golang and working proficiency in Python.

• Practical experience in building and managing event-driven or message-based systems, including contracts, idempotent consumers, replay, and back-pressure management.

• Experience in constructing and maintaining CI/CD pipeline tools; familiarity with GitLab CI on a large scale is a considerable advantage.

• Solid knowledge of web application security, including practical understanding of the OWASP Top 10 in real-world code.

• Direct experience with SAST, SCA, and secret-scanning tools such as Semgrep, CodeQL, Snyk, Trivy, Grype, and gitleaks.

• Proven track record of AI-driven engineering using AI tools and creating agentic workflows adopted by other engineers.

• Familiarity with AWS and Kubernetes.

• Preferred: experience in fintech, payments, Buy Now Pay Later (BNPL), or consumer lending.

• Preferred: knowledge of PCI DSS and SOC 2.

• Preferred: understanding of software supply-chain integrity, including SBOM pipelines, dependency governance, artifact signing, and provenance.

• Preferred: experience with policy-as-code and admission control tools, such as OPA, Kyverno, and conftest.

• Preferred: exposure to bug bounty programs or external vulnerability report triage.

• Preferred: experience with system-level threat modeling.

🏝️ Benefits

• Competitive salary and performance-based incentives.

• Comprehensive health, dental, and vision insurance.

• Generous paid time off and flexible working hours.

• Opportunities for professional development and continuous learning.

• Collaborative and inclusive work environment.