Senior Cybersecurity Engineer

About the role

We are seeking a Senior Cybersecurity Engineer to lead the design, implementation, and continuous improvement of enterprise security across cloud and SaaS environments. Based in Mexico, you will work remotely with engineering, compliance, and operations teams to protect critical assets and ensure regulatory compliance.

Key responsibilities

• Implement and maintain enterprise cybersecurity programs across cloud and corporate environments.
• Manage compliance initiatives aligned with NYDFS Cybersecurity Regulation 500, ISO 27001, SOC 2, PCI DSS and other standards.
• Conduct vulnerability assessments, coordinate penetration testing, and drive remediation of identified risks.
• Monitor, investigate, and respond to security events using AWS security services, SIEM platforms, and security monitoring tools.
• Develop and enhance incident response procedures, IAM controls, and security governance practices.
• Partner with software engineering teams to embed security into the SDLC through secure coding guidance, threat modeling, and application security reviews.
• Support security audits, vendor risk assessments, client security reviews, and prepare technical security documentation.
• Serve as a trusted advisor on cloud security, API security, and OWASP Top 10 best practices.

Required profile

• 7+ years of experience in cybersecurity engineering or information security, preferably in SaaS, cloud, or fintech.
• Strong communication and collaboration skills, with experience supporting audits and cross‑functional initiatives.
• Professional certifications such as CISSP, CISM, CEH or equivalent are highly desirable.
• Analytical mindset capable of solving complex security challenges in fast‑paced environments.

Required skills

• AWS cloud security
• Identity and Access Management (IAM)
• Security Information and Event Management (SIEM) platforms
• Vulnerability management and penetration testing
• Incident response
• Application and API security
• Secure Software Development Lifecycle (SDLC) practices
• OWASP Top 10
• Compliance frameworks: NYDFS, ISO 27001, SOC 2, PCI DSS

What we offer

• Competitive compensation package
• Fully remote work environment