Senior Software Engineer, Security Platform

This is a fully remote position, open to applicants in Chile.

📋 Description

• Design, develop, and manage security engineering services using Golang and Python on AWS and Kubernetes.

• Maintain, enhance, and phase out existing security services as needed.

• Take ownership of the NATS event-driven platform, overseeing contracts, consumers, delivery assurances, and observability.

• Integrate scanning tools, systems of record, ticketing systems, and metrics.

• Manage security gates for SAST, SCA, secret detection, container, and Infrastructure as Code (IaC) scanning.

• Optimize scanners, handle suppression workflows, minimize false positives, and implement enforcement gates.

• Develop CI review agents, automate finding triage and verification processes, and create remediation helpers.

• Automate workflows from triage to remediation and direct findings to responsible teams and vulnerability management operations.

• Engage in threat modeling and secure design review sessions.

• Participate in the on-call rotation as required.

• Report to the Director of Information Security and work collaboratively with detection and response teams, as well as network and zero trust engineers.

⛳️ Requirements

• Minimum of 6 years of professional software engineering experience, with substantial backend expertise.

• Experience deploying significant changes to a production application within the last 30 days.

• Strong command of Golang and a working knowledge of Python.

• Practical experience in building and operating event-driven or message-based systems, such as NATS or Kafka.

• Hands-on experience in constructing and managing CI/CD pipeline tools.

• In-depth knowledge of web application security, including the OWASP Top 10.

• Familiarity with SAST, SCA, and secret-scanning tools.

• Proven experience in AI-driven engineering, utilizing AI tools to develop effective workflows.

• Working knowledge of AWS and Kubernetes.

• Preferred: experience in fintech, payments, Buy Now Pay Later (BNPL), or consumer lending sectors.

• Preferred: understanding of PCI DSS and SOC 2 compliance standards.

• Preferred: experience with software supply chain integrity, including SBOM pipelines, dependency governance, artifact signing, and provenance.

• Preferred: knowledge of policy-as-code and admission control mechanisms.

• Preferred: experience with bug bounty programs or external vulnerability report triage.

• Preferred: experience in system-level threat modeling.

🏝️ Benefits

• Fully remote work opportunities.

• Flexibility to work from anywhere.

• Access to AI-assisted engineering tools and workflows.

• Work within an open-source-focused technology environment.