Security Engineer

About the role

We are looking for a Security Engineer based in Mexico to protect production systems and strengthen security across a fast‑growing technology environment. You will own security outcomes, from risk identification through remediation and continuous improvement, working closely with engineering and product teams.

Key responsibilities

• Identify, prioritize and drive remediation of high‑impact security risks across applications, infrastructure and production systems.
• Own and improve application security tooling for source code, software dependencies, secrets and related controls.
• Lead threat modeling, security risk assessments and architecture reviews for new and existing services.
• Integrate security practices into CI/CD pipelines and infrastructure‑as‑code workflows.
• Review, validate and triage findings from bug bounty programs, penetration tests and other assessments.
• Lead security monitoring and incident response activities, including alert investigation and remediation.
• Collaborate with engineering and product teams to set practical security priorities and ensure effective remediation.
• Develop and continuously improve security processes, standards and engineering practices across the organization.
• Take ownership of security deliverables from assessment through implementation, validation and ongoing improvement.

Required profile

• Strong background in security engineering with hands‑on experience securing production systems.
• Practical experience integrating security into CI/CD pipelines and infrastructure‑as‑code environments.
• Experience with application security, vulnerability management, threat modeling, security assessments and risk remediation.
• Familiarity with security tooling for code analysis, dependency management and secrets detection.
• Experience investigating security alerts and leading incident response activities.
• Ability to assess security risks across complex systems and translate findings into clear, actionable remediation plans.
• Ownership mindset with the ability to drive security initiatives across multiple engineering teams.
• Excellent communication and collaboration skills.

Required skills

• Application security
• Vulnerability management
• Threat modeling
• Security assessments
• CI/CD pipeline integration
• Infrastructure‑as‑code security
• Security monitoring
• Incident response