Senior Software Engineer, Security Platform

This is a fully remote position, open to applicants in Latin America.

📋 Description

• Design, develop, and manage security engineering services primarily using Golang and Python on AWS and Kubernetes.

• Maintain, fortify, and phase out existing security services.

• Oversee the NATS event-driven platform, including contracts, consumers, delivery guarantees, and observability.

• Integrate scanners, the record system for findings, tickets, and metrics.

• Manage security gates for SAST, SCA, secret detection, container scanning, and IaC scanning.

• Adjust scanners, handle suppression workflows, minimize false positives, and implement enforcing gates.

• Develop CI review agents, automate finding triage and verification, and create remediation helpers.

• Automate workflows from triage to remediation, encompassing reproduction context, fix guidance, and routing.

• Engage in threat modeling and secure design reviews.

• Participate in the on-call rotation.

• Report to the Director of Information Security and collaborate with detection and response, as well as network and zero trust engineers.

⛳️ Requirements

• Over 6 years of professional software engineering experience, with considerable backend expertise.

• Implemented significant changes to a production application within the last 30 days.

• Strong command of Golang and working knowledge of Python.

• Practical experience with event-driven or message-based systems like NATS or Kafka, encompassing contracts, idempotent consumers, replay, and back-pressure.

• Hands-on experience in building and managing CI/CD pipeline tooling; familiarity with GitLab CI at fleet scale is a significant advantage.

• Comprehensive understanding of web application security, including the OWASP Top 10.

• Practical experience with SAST, SCA, and secret-scanning tools such as Semgrep, CodeQL, Snyk, Trivy, Grype, and gitleaks.

• Proven experience in AI-forward engineering utilizing AI tools and creating agentic workflows embraced by other engineers.

• Working knowledge of AWS and Kubernetes.

• Preferred: experience in fintech, payments, BNPL, or consumer lending.

• Preferred: understanding of PCI DSS and SOC 2.

• Preferred: expertise in software supply-chain integrity, including SBOM pipelines, dependency governance, artifact signing, and provenance.

• Preferred: familiarity with policy-as-code and admission control, including OPA, Kyverno, and conftest.

• Preferred: experience with bug bounty programs or triaging external vulnerability reports.

• Preferred: experience in system-level threat modeling.

🏝️ Benefits

• Fully remote work arrangement.

• Opportunity to work from any location.

• AI-assisted engineering workflows.

• Collaborative work with global security engineering teams.