Job Title: Security Engineer Department: Information Security / Engineering Employment Type: Full-time

Location:
Mexico Work mode: 100% Remote

Experience:
5+ Years

Job Description
We are seeking a highly skilled and proactive Security Engineer to strengthen our defense-in-depth architecture and ensure the continuous integrity of our digital assets. In this role, you will be responsible for safeguarding our infrastructure, applications, and data by implementing robust network controls, automating cloud security, and embedding security deep into our CI/CD pipelines. The adecuado candidate bridges the gap between technical execution and regulatory alignment, ensuring our systems remain resilient against emerging threats while meeting strict compliance frameworks. Experience within the financial technology or banking industry is highly preferred.

Key Responsibilities
Network Security & Infrastructure
• Configure, manage, and optimize Cloudflare services, including Web Application Firewalls (WAF), Advanced Rate Limiting policies, and secure DNS management.
• Deploy, tune, and monitor Intrusion Detection Systems (IDS) to identify and mitigate malicious traffic.
• Implement Infrastructure as Code (IaC) using Terraform to provision and manage security infrastructure securely and repeatably. Application & Cloud Security
• Own the application security lifecycle by integrating and managing SAST and DAST tools into development workflows.




• Conduct continuous vulnerability scanning and container security assessments using Trivy and AWS Inspector.
• Manage Software Bill of Materials (SBOM) and monitor open-source dependencies using Snyk to mitigate supply chain risks.
• Oversee PII Scanning initiatives to discover, classify, and protect sensitive customer and financial data. Governance, Risk & Compliance (GRC)
• Collaborate with the compliance team to align technical security controls with industry frameworks and regulations (e.g., SOC 2, PCI-DSS, ISO 27001).
• Participate in internal risk assessments, threat modeling, and audit preparation.
• Help define, document, and enforce corporate security policies and standards. Required Technical Skills & Qualifications
•

Experience:
3+ years of professional experience in a Dedicated Security Engineering or DevSecOps role.
• Network Defense: Proven expertise with Cloudflare (WAF, Rate Limiting), DNS architecture, and IDS systems.
• Infrastructure as Code: Strong hands-on experience writing and maintaining Terraform configurations.
• Cloud Ecosystems: Deep understanding of AWS security services and automated cloud assessment tools (AWS Inspector, Trivy).
• AppSec Pipeline: Proficiency with application testing tooling (SAST/DAST), vulnerability management systems (Snyk), and handling SBOMs.
• Data Protection: Solid understanding of data classification, tokenization, and scanning for PII (Personally Identifiable Information).

📌 Security Engineer (México)
🏢 CLOUDSUFI
📍 México