Senior SecOps Engineer

About the role

This senior SecOps Engineer role is focused on protecting and evolving large‑scale cloud‑native systems for a fast‑growing fintech environment. Based in Mexico, you will design and implement end‑to‑end security solutions across AWS infrastructure and application layers, embedding security into every stage of the development lifecycle.

Key responsibilities

• Design, implement and maintain cloud security architecture and controls across AWS services using a defense‑in‑depth approach.
• Develop and automate security solutions for hardening, vulnerability management, threat detection, logging, monitoring and incident response.
• Collaborate with Engineering, Product, DevOps and IT teams to embed security best practices into CI/CD pipelines and system design.
• Manage and enhance security controls for IAM, WAF, security groups, EC2, EKS, S3, RDS and related logging/monitoring systems.
• Support incident response activities, including triage, investigation, containment and remediation.
• Drive adoption of DevSecOps practices such as shift‑left security, infrastructure as code and automated security testing.
• Evaluate and implement third‑party and native cloud security tools to strengthen detection, protection and compliance.
• Leverage AI‑enabled tools and automation to improve security operations efficiency and threat response.

Required profile

• 5‑7 years of experience in cloud security or SecOps roles within AWS or similar public cloud environments.
• Strong hands‑on experience securing cloud infrastructure using AWS services (IAM, WAF, EC2, EKS, S3, RDS, etc.).
• Experience with Infrastructure as Code (Terraform, CloudFormation) and automation of security controls.
• Solid understanding of cloud‑native security domains including IAM, API security, encryption, container security and vulnerability management.
• Proven experience working in DevSecOps environments alongside Engineering, DevOps and SRE teams.
• Familiarity with security monitoring, threat detection, incident response and vulnerability scanning tools.
• Scripting or automation experience (Python preferred) is a plus.

Required skills

• AWS
• IAM
• WAF
• EC2
• EKS
• S3
• RDS
• Terraform
• CloudFormation
• Kubernetes
• CI/CD pipelines
• DevSecOps
• Security monitoring
• Threat detection
• Incident response
• Vulnerability scanning
• Python (optional)