Security Engineer

Arrive; Bogotá; Presencial; COP 100.000.000 - 180.000.000; Jornada completa

Descripción de la vacante

Arrive seeks a Security Engineer to join its security team, focusing on design, code review, and pre‑production security capabilities for the ParkMobile app, mobile web, and internal teams.

You will collaborate with developers across the U.S. and Europe to build tools, secure CI/CD, and enable secure multi‑cloud deployments using Terraform and related tooling.

Formación

• 5+ years of experience in application security, risk assessment, and secure code review.
• Strong background as a software developer before moving into security engineering preferred.
• Proficient with Kubernetes, GitHub, AWS security tools, Terraform; multi-cloud experience.

Responsabilidades

• Enhance the development pipeline with security tools and automated agents.
• Monitor and report vulnerabilities with actionable insights.
• Build and maintain security tooling for developers across the lifecycle.
• Configure multi-cloud environments (AWS, GCP) securely.
• Implement IaC with Terraform/Terragrunt for secure deployments.
• Develop security capabilities in CI/CD pipelines (SAST/DAST, container security).
• Collaborate with developers to remediate vulnerabilities and promote security culture.

Conocimientos

Application security

Risk assessment

Secure code review

Programming languages: Java

Programming languages: Kotlin

Programming languages: Go

Programming languages: Python

SQL

Multi-cloud AWS/GCP

Herramientas

Kubernetes (EKS/GKE)

GitHub

AWS security tools

Terraform

Descripción del empleo

We’ve signed up to an ambitious journey. Join us! As Arrive, we guide customers and communities towards brighter futures and more livable cities. It isn’t a challenge just anyone could take on. Luckily, we have something to help us make it happen. Our people and our values. We Arrive Curious, Focused and Together. Just as our entire brand is inspired by the North Star, the shining light leading travelers to their destinations since time began, our values guide us. They help us be at our best. For our customers. For the cities and communities we serve. For ourselves. As a global team, we are transforming urban mobility. Let’s grow better, together.

The Role

We are seeking a Security Engineer to join our security team. This role is a vital part of our “pre‑ship” defense, focusing on security design, code review, and the implementation of security capabilities before code reaches production. You will support the core ParkMobile application, mobile web, and various internal teams to ensure our products are secure by design. Reporting to the Engineering Manager, you will have a global impact by building tools and reporting mechanisms that safeguard our entire ecosystem. This is a collaborative position that works closely with developers across the U.S. and Europe to transform urban mobility securely.

How To Make An Impact

• Enhance and fix the development pipeline by integrating advanced security tools and automated agents to bolster our security posture.
• Monitor and report on vulnerabilities across the board, providing actionable insights to internal product teams.
• Build and maintain security tooling that assists developers at every level of the product lifecycle.
• Configure and secure multi‑cloud environments, specifically focusing on AWS and Google Cloud Platform (GCP).
• Implement and manage Infrastructure as Code (IaC) using Terraform and Terragrunt to ensure consistent, secure deployments.
• Develop security capabilities within CI/CD pipelines, including static and dynamic scanning (SAST/DAST) and container security.
• Collaborate with developers to remediate vulnerabilities and cultivate a culture of security awareness and continuous education.

About You

You are a proactive, growth‑minded professional who views security as an enabler for development, not a roadblock. You thrive in a collaborative environment where you can use your experience to mentor others and solve complex problems. You are a “quick thinker” who enjoys the challenge of building proactive defenses rather than just reacting to incidents. You approach security with a developer’s mindset, understanding the nuances of how software is built and shipped. You are curious about new technologies, such as multi‑cloud transitions, and are excited to help a global team scale its security efforts.

Your background

• 5+ years of experience in application security, risk assessment, and secure code review.
• Proven experience as a Software Developer before transitioning into Security Engineering is highly preferred.
• Strong technical proficiency with Kubernetes (EKS/GKE), GitHub, and AWS security tools (GuardDuty, KMS, IAM, etc.).
• Expertise in Infrastructure as Code, specifically using Terraform as a core tool.
• Solid understanding of programming languages (e.g., Java, Kotlin, Go, or Python) and a strong command of SQL.
• Experience with multi‑cloud environments (AWS and GCP) and security orchestration tools like CrowdStrike.

This role is based in Colombia.

Arrive, including brands like EasyPark, Flowbird, RingGo, ParkMobile and Parkopedia, is a leading global mobility platform. Present in over 90 countries and 20,000 cities, the company helps people and decision‑makers make smarter decisions about urban mobility and ease the experience of travel worldwide. Arrive delivers a unique combination of the core ingredients to make cities more livable: from smart payments and optimized car parks to data‑driven traffic reduction and support for reinvestment in public transport and green space. It’s about more than function, it’s about saving time and simplifying the experience of travel for everyone. Travel is more than a journey, it’s how you Arrive.