Security Engineer

Security Engineer

Location: Remote (UTC-5 to UTC+3 time zones)

Office Locations: Buenos Aires, Argentina; Córdoba, Argentina; Montevideo, Uruguay; Barcelona, Spain

Work Arrangement: Remote

Job Type: Full-time

The Information Security Team is in charge of identifying, evaluating, reporting and mitigating risks to acceptable levels that meet compliance and regulatory requirements. From corporate systems and users’ security, creating security awareness programs, working with development teams to securely design features to enable new markets and products, to incident detection and remediation, the team maintains the corporate wide information security program to ensure that information assets are adequately protected, aligned with the company vision, mission, culture and business objectives. 

Full time

About the Position
For this role in the Information Security Team, we are looking for someone who is passionate about designing, implementing and testing security controls to secure our systems and users. The role involves understanding the latest trends in infrastructure and systems security with regards to identity driven, context aware access and using that knowledge to enhance our security.

This person will closely work with the VP of Information Security and CISO helping improve our Information Security Program, in particular the processes, standards and tools related to Systems and Users.

The ideal candidate is someone looking to work in a dynamic team and to share their knowledge with peers.

Location 

Remote work from anywhere between UTC-5 and UTC+3 time zones. Office locations include Buenos Aires, Cordoba, Montevideo, and Barcelona.

Responsibilities 

As a Security Engineer, you will: 

• Endpoint & Systems Security: Manage, monitor, and enforce security policies across our global, remote workforce endpoints.
• Identity & Access Management (IAM): Oversee user access controls, configure single sign-on (SSO) configurations, and manage user lifecycles across enterprise software and cloud environments.
• Network & Infrastructure Defense: Partner with IT networks and engineering infrastructure teams to implement secure boundary defenses, segmentation strategies, and monitoring.
• Penetration Testing & Assessment Coordination: Serve as the primary technical point of contact for external penetration testing vendors. Own the end-to-end lifecycle of security assessments: define rules of engagement, establish testing scopes, facilitate environment access, and translate final assessment findings into actionable remediation workflows for internal teams.
• Third-Party Vendor Risk Management: Perform thorough security due diligence, risk modeling, and operational compliance reviews on all prospective vendors and software systems.
• AI Technology Risk Mitigation: Proactively research and assess the security risks of deployed and incoming AI/LLM technologies. Establish configuration guardrails to prevent corporate data poisoning, data leakage, and insecure plugin executions.
• Vulnerability & Patch Management: Coordinate with IT teams to identify, prioritize, track, and patch vulnerabilities across endpoints and system architecture.
• Incident Triage & Response: Act as a support responder for the SIRT team on infrastructure and endpoint alerts, isolating threats and performing root-cause analyses.
• Security Standard Procedures: Design, implement, and maintain security standards and procedures to support the deployment and isolation of network-connected devices.

About you

Skills and Experience

• At least 5 years of professional experience in security engineering, infrastructure security, or system administration within a highly remote or distributed corporate layout.
• Strong core competency in securing operating systems (macOS, Windows, Linux) and administrative exposure to cloud identity providers (e.g., Okta, Entra ID, Google Workspace).
• Demonstrated experience reviewing vulnerability data or penetration test reports and collaborating with cross-functional IT/engineering infrastructure teams to remediate identified flaws.
• Clear understanding of core networking protocols, firewall architectures, VPN infrastructure, and Zero Trust access frameworks.
• A structured troubleshooter who can dissect network, configuration, or access logs to pinpoint systematic anomalies or operational failures.
• Fluent written and verbal communication skills in English, with an ability to clearly explain security requirements to non-technical staff.
• Basic comfort with automation scripts (e.g., Python, Bash, PowerShell) to collect logs, interact with system APIs, or automate configuration posture audits.

What we value

• Passion for security in particular and technology in general.
• Solid communication skills and the ability to clearly articulate complex ideas and plans. 
• Advanced English proficiency.
• Being purpose-driven, resourceful and able to deliver results autonomously.
• Ability to understand and manage differences and discrepancies by making decisions and proposing alternative solutions.