Security & Applications Operations Engineer

About the Company

We’re partnering with a fast-growing AI company that builds customer intelligence for B2B SaaS businesses. Its machine learning models analyze product telemetry, meaning how customers actually use a software product, to predict churn and expansion up to 12–18 months before renewal. Sales, Customer Success and Product leaders use those predictions to make better decisions.

The company recently closed its Series A and has received industry recognition for its machine learning work. Its product is self-hosted and deployed inside enterprise customers’ environments, so the company’s own security posture is something customers review before they buy.

About the Role

We’re looking for a hands-on, technically versatile Security & Applications Operations Engineer to own the internal systems, applications and security operations that keep the company running. You’ll report directly to the Co-Founder & CTO.

Today, engineering leadership handles SOC 2 evidence, access reviews, vulnerability triage, internal releases and tool administration. You’ll be the first person fully dedicated to this work. You’ll take these functions over, own them end to end, and automate as much of the recurring work as you can.

What You’ll Do

Security & Compliance

- Own the SOC 2 program end to end: control implementation, continuous monitoring in Vanta, evidence collection, documentation and audit readiness.
- Automate recurring daily, weekly and monthly compliance tasks down to minimal manual effort.
- Own vulnerability management across code, dependencies and endpoints in Snyk, plus access reviews and penetration testing programs.
- Maintain security policies, incident response procedures and the materials used to answer customer security reviews.

Internal Applications & IT Operations

- Administer the internal stack, including Vanta, Snyk, ngrok, OpenRouter and Exa: credentials, secrets, integrations, permissions, and model access and spend controls.
- Own employee onboarding and offboarding, endpoint devices, and identity and access management (SSO, MFA, role-based permissions).
- Administer secure remote access and tunneling with ngrok.

Release Operations

- Own the release process for internal applications and services: scheduling, environment configuration, versioning and rollback.
- Build and maintain build and deploy pipelines, environment provisioning and release runbooks.

Business Systems

- Own Salesforce administration: user permissions, configuration, workflows, automations and integrations.
- Evaluate new tools and automate manual processes across teams.

What We’re Looking For

- Hands-on experience running a SOC 2 program, including continuous control monitoring and evidence automation in Vanta, Drata or similar.
- Real scripting and automation skills. You should be able to replace a manual control check with a scheduled job.
- Experience with SaaS administration, IAM, endpoint management and employee onboarding/offboarding.
- Experience with release and environment operations: CI/CD, configuration, versioning and rollback.
- Comfort administering business applications such as Salesforce.
- Strong ownership and the ability to work independently as the only person focused on this area.
- Advanced English, since all interviews and daily work are in English.

Nice to Have

Snyk, ngrok, LLM gateways like OpenRouter, Jamf or Kandji, Okta or Google Workspace as an identity provider, and experience coordinating auditors, penetration testers and security vendors.

Conditions

- 100% remote from Mexico.
- Contractor position through Deel, paid in MXN.

#J-18808-Ljbffr

📌 Security Engineer (México)
🏢 Talently
📍 México