Remote DevSecOps Engineer & Security Solutions Lead

Azumo; Santiago; Presencial; CLP 112.570.000 - 150.094.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Paid Time Off

Mentored Career Development

USD Remuneration

Profit Sharing

Maternity Coverage

100% Remote

Descripción de la vacante

Azumo is seeking a highly technical DevSecOps Engineer / Security Solutions Lead to own and strengthen security across our platform, infrastructure, and AI-driven systems in a remote-first, fast-growing FinTech environment. This hands-on, operational role collaborates with engineering and compliance to secure systems and drive continuous security improvements.

Based in a remote-capable setup, you will partner with teams to design secure architectures, implement controls, secure AI systems, and

Formación

• 5+ years of hands-on experience in security engineering, infrastructure security, application security, DevSecOps, vulnerability management, offensive security.
• Exceptional knowledge of the AWS ecosystem.
• Experience identifying and remediating vulnerabilities in production systems.
• Working knowledge of compliance frameworks: SOC 2, PCI, and best practices for FinTech environments.
• Self-starter mindset: able to drive projects, make decisions, and prioritize ruthlessly in a fast-moving environment.
• Excellent communication skills with the ability to articulate complex systems to both engineering and business stakeholders.

Responsabilidades

• Secure and harden cloud infrastructure, applications, APIs, internal systems, and operational workflows.
• Implement and maintain security controls across production environments, CI/CD pipelines, cloud infrastructure, and internal tooling.
• Work directly with engineering teams to remediate vulnerabilities and improve secure development practices.
• Ensure encryption, secrets management, logging, monitoring, and access controls are properly implemented and continuously maintained.
• Design and improve security architecture across cloud-native and distributed systems.
• Build scalable security processes that integrate directly into engineering and operational workflows.
• Continuously identify, assess, prioritize, and remediate security vulnerabilities across infrastructure, applications, APIs, and operational systems.
• Proactively search for weaknesses through vulnerability scanning, penetration testing, adversarial testing, threat modeling, manual security reviews.
• Coordinate remediation efforts across engineering and operations teams.
• Validate fixes and ensure long-term mitigation strategies are implemented.
• Improve detection and prevention capabilities for emerging threats.
• Help establish a culture of continuous security improvement and operational accountability.
• Secure AI-driven systems and automated agents against emerging threats including prompt injection, adversarial inputs, unauthorized or unintended actions, unsafe outputs, data leakage and exposure risks.
• Design and implement guardrails and validation layers for AI-generated actions.
• Ensure AI systems safely handle untrusted inputs from IVRs, web systems, APIs, and human interactions.
• Monitor AI system behavior for anomalies, abuse attempts, or unsafe decision-making.
• Partner with engineering teams to ensure AI systems are observable, auditable, bounded, and fail safely.
• Help define operational and technical controls for responsible AI deployment.
• Improve and maintain security monitoring, alerting, logging, and incident response capabilities.
• Investigate suspicious activity, anomalies, and potential security incidents.
• Lead or support incident response efforts, root cause analysis, and remediation planning.
• Ensure operational visibility into system health, access patterns, and security events.
• Recommend and implement preventative measures following incidents or security discoveries.
• Collaborate closely with Compliance and Operations teams to ensure security controls meet SOC 2 requirements, PCI DSS requirements, Financial and consumer data security regulations.
• Assist with audit preparation, evidence collection, security documentation, and control validation.
• Help operationalize security controls so compliance is continuously maintained—not just audit-driven.
• Participate in risk assessments, control reviews, and remediation planning.
• Ensure systems handling sensitive financial and consumer data align with regulatory and internal security requirements.
• Participate directly in customer and partner due diligence processes.
• Answer technical security questions from enterprise customers, banks and financial institutions, prospects and partners, auditors and third‑party assessors.
• Support and complete security questionnaires, RFPs, vendor risk assessments.
• Clearly communicate security architecture, operational controls, monitoring capabilities, and security practices.
• Help build trust with prospects and accelerate enterprise partnerships through strong security leadership and communication.
• Work closely with Engineering, Product, Compliance, Operations, and Leadership teams to improve overall security posture.
• Contribute to architecture reviews, security planning, engineering roadmaps, and operational processes.
• Help embed security‑first thinking into engineering and operational culture.
• Partner with teams to balance security, reliability, scalability, and business velocity.

Conocimientos

Security engineering

DevSecOps

Vulnerability management

Threat modeling

Incident response

Compliance awareness

Security architecture

Herramientas

AWS ecosystem

SIEM

Observability

Cloud security tooling

Descripción del empleo

Azumo is seeking a highly technical DevSecOps Engineer / Security Solutions Lead to own and strengthen security across our platform, infrastructure, and AI-driven systems in a remote-first, fast-growing FinTech environment. This hands-on, operational role collaborates with engineering and compliance to secure systems and drive continuous security improvements.

Based in a remote-capable setup, you will partner with teams to design secure architectures, implement controls, secure AI systems, and