Security Engineer (Early Career) - Remote

About the role

Clara, a Latin American payment platform, is hiring a Security Engineer (early career) for a remote-first position based in Mexico City. You will rotate across the security function in your first year, with real ownership from the first month, covering AI security, cloud security, secure code, detection and response.

Key responsibilities

• AI security: review how teams use LLMs and AI tooling, help define guardrails, operate the LLM-based investigation agent on the SIEM, and build awareness of prompt injection and data exfiltration risks
• Cloud security on AWS and GCP: triage findings from GuardDuty, Security Command Center, IAM and network reviews, run posture checks, contribute to the GCP project inventory, and learn Auth0, Cloudflare and Google Workspace controls
• Secure code and CI/CD: review tools, scripts and pull requests for secrets and unsafe code, own SonarQube and dependency-scanning results, and review CI/CD changes touching security-sensitive configuration
• Detection, response and triage: write and refine Splunk queries, maintain detection rules and dashboards, investigate alerts, monitor the EDR console, contain suspicious endpoints, triage phishing reports and escalate incidents through incident.io

Required profile

• 1-2 years in security, IT, software engineering or a related technical role; internships, CTFs, bug bounties, open-source contributions and personal projects count
• Working knowledge of at least one of AWS or GCP (IAM, security groups, VPC firewall rules, service accounts)
• Command-line comfort (bash), reading JSON and logs, and reading code in at least one language (Python, JavaScript, Go) well enough to spot security issues
• Basic familiarity with a log query language (SPL, KQL or similar) or strong drive to become fluent quickly
• Conceptual understanding of identity and authentication (OAuth, SSO, MFA, service-to-service auth)
• Hands-on experience with generative AI tools and a skeptical, evidence-based approach
• Strong written communication in Spanish and English

Nice to have

• Prior exposure to a SIEM, EDR console or email/web security platform
• Python or JavaScript for scripting, SAST/dependency scanning, secrets management or CI/CD security
• LLM API, agent or MCP tooling experience
• Entry-level certifications (Security+, AWS Cloud Practitioner, Google Cloud Digital Leader / Associate Cloud Engineer)
• Portuguese

What we offer

• Full security surface exposure in the first year, with a senior team pairing with you
• Modern stack: AWS, GCP, Splunk, Auth0, Cloudflare, SonarQube, incident.io, Claude
• Budget and time for certifications, conferences and the hacker community
• Competitive salary and stock options (ESOP) from day one
• Annual learning budget and accelerated development paths