Senior Software Engineer, Security Platform

This is a fully remote position, open to applicants in Mexico.

📋 Description

• Design, develop, and manage security engineering services primarily utilizing Golang and Python within AWS and Kubernetes environments.

• Maintain, enhance, and phase out existing security services as necessary.

• Oversee the NATS event-driven platform, including managing contracts, consumers, delivery guarantees, and observability aspects.

• Integrate scanners, the system of record for findings, ticketing systems, and metrics.

• Manage SAST, SCA, secret detection, container, and Infrastructure as Code (IaC) security gates within GitLab CI.

• Optimize scanners, handle suppression workflows, minimize false positives, and implement enforcing gates.

• Develop CI review agents, automate finding triage and verification, and create remediation tools.

• Automate workflows from triage to remediation, including context reproduction, fix guidance, and routing.

• Engage in threat modeling and participate in secure design reviews.

• Take part in the on-call rotation as required.

• Report to the Director of Information Security and collaborate with detection and response teams, as well as network and zero trust engineers.

⛳️ Requirements

• Over 6 years of professional software engineering experience, with a considerable focus on backend development.

• Have deployed significant changes to a production application within the last 30 days.

• Strong expertise in Golang and proficient in Python.

• Practical experience in building and managing event-driven or message-based systems such as NATS or Kafka.

• Hands-on experience in constructing and operating CI/CD pipeline tools; experience with GitLab CI at scale is a strong advantage.

• Solid knowledge of web application security, particularly the OWASP Top 10.

• Practical experience with SAST, SCA, and secret-scanning tools like Semgrep, CodeQL, Snyk, Trivy, Grype, and gitleaks.

• Demonstrated current utilization of AI tools and experience in developing agentic workflows adopted by fellow engineers.

• Familiarity with AWS and Kubernetes environments.

• Preferred: experience in fintech, payments, Buy Now Pay Later (BNPL), or consumer lending sectors.

• Preferred: knowledge of PCI DSS and SOC 2 compliance standards.

• Preferred: experience with software supply chain integrity, including SBOM pipelines, dependency governance, artifact signing, and provenance.

• Preferred: understanding of policy-as-code and admission control tools such as OPA, Kyverno, and conftest.

• Preferred: experience with bug bounty programs or the triage of external vulnerability reports.

• Preferred: background in system-level threat modeling.

🏝️ Benefits

• Fully remote work opportunities.

• Flexibility to work from wherever you are most productive.

• An engineering environment focused on open-source initiatives.

• Access to AI-assisted engineering tools and workflows.