Tonder operates critical payments infrastructure where security is part of the product.

We’re looking for a DevSecOps Engineer to turn security and compliance into automated engineering systems.

Our goal is to replace as much manual security work as possible with controls enforced through code, infrastructure, pipelines, monitoring, and AI-powered automation.

You’ll own security projects from identifying the requirement or risk through remediation, validation, and production.

What you’ll own

Build and automate security controls across our infrastructure and software development lifecycle.

Automate vulnerability detection, dependency scanning, infrastructure scanning, remediation, and security monitoring.

Own and improve IAM, secrets management, cloud security, access controls, and production guardrails.

Drive security and compliance projects from requirement through implementation and completion.

Automate PCI DSS and other security controls wherever technically possible.





Build AI-assisted workflows for security analysis, monitoring, remediation, documentation, and evidence collection.

Identify systemic security risks and build permanent controls instead of recurring manual fixes.

What we’re looking for

Strong AWS and cloud security experience.

Knowledge of IAM, networking, secrets management, vulnerability management, and infrastructure security.

Experience embedding security into CI/CD and engineering workflows.

Strong Infrastructure as Code and security automation experience.

Experience with regulated environments, PCI DSS, or similar frameworks is strongly preferred.

Strong scripting or software engineering skills.

Advanced use of AI for engineering, security analysis, and automation.

High ownership and the ability to follow security projects through presente remediation, not just findings.

#J-18808-Ljbffr

📌 DevSecOps Engineer (México)
🏢 Tonder Technologies
📍 México