SR DevSecOps - Argentina, Brazil, Spain & Uruguay

dLocal; Brasil; Teletrabalho; BRL 377.000 - 540.000; Tempo integral

Resumo da oferta

A leading fintech company in Brazil is seeking a Cloud Security Architect to lead security architecture across AWS, design hardened systems, and integrate security measures. Ideal candidates will have deep cloud-native experience, strong automation skills in Python, and the ability to mentor teams. This role offers a flexible, remote-first culture with excellent benefits including learning and development opportunities.

Serviços

Remote work flexibility

Learning & development opportunities

Language classes

Social budget for team activities

Qualificações

• Experience with secure-by-default architecture.
• Proven supply-chain and CI/CD security knowledge.
• Mentorship and documentation skills required.

Responsabilidades

• Lead architecture across AWS.
• Design hardened images for containers.
• Integrate cloud/runtime signals into security frameworks.

Conhecimentos

Deep cloud-native IR experience

Strong software and automation skills in Python and Go or Rust

Kubernetes security skills

Practical fluency in CIS, NIST 800-53/CSF

Technical leadership and mentoring

Ability to convert risks into metrics

Formação académica

Relevant certifications (CISSP, CCSP, etc.)

Ferramentas

Terraform

AWS

Kubernetes

Cloudflare

Splunk

Descrição da oferta de emprego

Why should you join dLocal?

dLocal enables the biggest companies in the world to collect payments in 40 countries in emerging markets. Global brands rely on us to increase conversion rates and simplify payment expansion effortlessly. As both a payments processor and a merchant of record where we operate, we make it possible for our merchants to make inroads into the world’s fastest-growing, emerging markets.

By joining us you will be a part of an amazing global team that makes it all happen, in a flexible, remote-first dynamic culture with travel, health and learning benefits, among others. Being a part of dLocal means working with 1000+ teammates from 30+ different nationalities and developing an international career that impacts millions of people’s daily lives. We are builders, we never run from a challenge, we are customer-centric, and if this sounds like you, we know you will thrive in our team.

What will I be doing?

• Lead “secure-by-default” architecture across AWS
• Design hardened base images for containers, Kubernetes, and AMIs
• Codify infrastructure and controls with IaC (Terraform/Pulumi) and drift detection
• Operate Kubernetes runtime controls (admission, image policies, least-privilege)
• Codify infrastructure and controls with IaC (Terraform/Ansible) and drift detection
• SIEM/SOAR integrations (Splunk/Sumo/ELK) with high-signal detections
• Integrate code/pipeline/cloud/runtime signals into SIEM/SOAR with actionable context
• Hands-on WAF/edge experience (Cloudflare/Akamai/AWS WAF) within layered defenses
• Lead threat modeling and translate risks into actionable backlogs with owners and dates
• Proven supply-chain and CI/CD security (signing, pinning, renovate/dependabot policies)
• Mentor teams, document processes, and drive adoption

What skills do I need?

• Deep cloud-native IR experience (multi-account AWS, containers, Kubernetes)
• Strong software and automation skills in Python and Go or Rust
• Kubernetes security: admission controls, PSS, network policies, and eBPF/Falco
• Practical fluency in CIS, NIST 800-53/CSF, OWASP ASVS/Top 10, and PCI-DSS
• Influence, technical leadership, mentoring, and excellent documentation
• Ability to convert risks into metrics and outcomes for stakeholders

Will be considered an plus:

• Relevant certifications (CISSP, CCSP, CSSLP, OSCP/OSWE, GIAC, Security+)
• Prior DevOps/Platform/SRE experience operating at scale
• PCI-DSS exposure with automated evidence mapping
• Open‑source contributions to hardening or security toolingUse of LLM/RAG/ML to enrich detections and runbooks
• Experience building internal security tools (hardening automation, dashboards, API integrations)
• Good knowledge of security architectures, both monoliths and microservices, including how they are developed and operate at scale
• Have had developed a personal or enterprise software/script with focus on security (Hardening automation, API integration for security dashboards, any other use case)

What do we offer?

Besides the tailored benefits we have for each country, dLocal will help you thrive and go that extra mile by offering you:

- Remote work: work from anywhere or one of our offices around the globe!*

- Flexibility: we have flexible schedules and we are driven by performance.

- Fintech industry: work in a dynamic and ever‑evolving environment, with plenty to build and boost your creativity.

- Referral bonus program: our internal talents are the best recruiters - refer someone ideal for a role and get rewarded.

- Learning & development: get access to a Premium Coursera subscription.

- Language classes: we provide free English, Spanish, or Portuguese classes.

- Social budget: you'll get a monthly budget to chill out with your team (in person or remotely) and deepen your connections!

- dLocal Houses: want to rent a house to spend one week anywhere in the world coworking with your team? We’ve got your back!

*For people based in Montevideo (Uruguay) applying to non‑IT roles, 55% monthly attendance to the office is required

What happens after you apply?

Our Talent Acquisition team is invested in creating the best candidate experience possible, so don’t worry, you will definitely hear from us. We will review your CV and keep you posted by email at every step of the process!

Also, you can check out our webpage, Linkedin, Instagram, and Youtube for more about dLocal!