AI Native Security and Networking Specialist

Palo IT; Palo Alto; Hybrid; MXN 600,000 - 900,000; Full time

Job summary

PALO IT in Mexico City (CDMX) or Bogota seeks a Security and Networking Specialist to own security posture and networking from design to remediation across our SaaS platforms. The role targets 7+ years in security and networking and operates within a global consultancy.

You will lead threat modeling, implement secrets management, KMS, token vaults, oversee pentesting and remediation, and enforce Google Cloud security (IAM, VPC, firewalls).

Qualifications

• Must-have: 7+ years in security and networking roles, with threat modelling expertise.
• Must-have: strong networking and security policy experience in planning and execution.
• Must-have: design of secrets management, KMS, and token vaults.
• Must-have: scope pentests and review remediation strategies.
• Must-have: knowledge of Google Cloud security (IAM, VPC, firewall, perimeter).
• Must-have: experience with API security and OAuth token management.
• Must-have: familiarity with hardening containers and Kubernetes in a Google Cloud environment.

Responsibilities

• Security Management: Lead the security posture development and oversee networking policies from planning to execution.
• Threat Modelling & Compliance: Conduct threat modelling, implement secrets/KMS designs, and manage token vaults while ensuring compliance with SOC 2, ISO 27001, and GDPR for SaaS.
• Pentesting & Remediation Oversight: Scope pentesting efforts and review remediation processes, ensuring continuous improvement and vulnerability management.
• Google Cloud Security: Implement security measures on Google Cloud, including IAM, VPC, firewalls, and perimeter security.
• API Security: Manage API security, including OAuth token management and hardening of containers/Kubernetes within the Google Cloud environment.

Skills

Security strategy

Threat modelling

Networking policies

Secrets/KMS design

Token vaults

Pentesting oversight

Remediation governance

Google Cloud security

IAM / VPC / Firewall

API security (OAuth)

Containers & Kubernetes hardening

Job description

Quick answer: what is this job? PALO IT is hiring a Security and Networking Specialist in CDMX or Bogota, responsible for overseeing the security posture and networking of the platform, from design to remediation. The role sits in a technology consultancy of 400+ experts across 9 countries, and requires a minimum of 7 years of experience in key areas outlined below.

Who We Are

Building the AI-first frontier enterprise. We are a global technology consultancy with a trademarked, AI-first approach, Gen-e2™. It redefines how enterprises build digital products and transform their organizations with AI. We do the right thing, and we do it right. We're proud to be a World Economic Forum New Champion, and a B Corp-certified company.

• We are small enough to care locally, big enough to deliver globally (9 countries, 400+ experts from 50+ nationalities)
• We are becoming an agentic organization, adopting the AI-native operating model we bring to our clients.
• We are robust and resilient (100% independent, 0 debt, founded 2009)
• We are AI-native professionals who invest in what we believe and work as a collective intelligence
• We are positive, courageous and deliver at the leading edge

What does a Security and Networking Specialist do at PALO IT?

As a Security and Networking Specialist at PALO IT, you will:

• Security Management: Lead the security posture development and oversee networking policies from planning to execution.
• Threat Modelling & Compliance: Conduct threat modelling, implement secrets/KMS designs, and manage token vaults while ensuring compliance with SOC 2, ISO 27001, and GDPR for SaaS.
• Pentesting & Remediation Oversight: Scope pentesting efforts and review remediation processes, ensuring continuous improvement and vulnerability management.
• Google Cloud Security: Implement security measures on Google Cloud, including IAM, VPC, firewalls, and perimeter security.
• API Security: Manage API security, including OAuth token management and hardening of containers/Kubernetes within the Google Cloud environment.

What experience do you need for this role?

You're a strong fit for this Security and Networking Specialist role if you have:

Must-have

• A minimum of 7 years of experience in security and networking roles, with expertise in threat modelling.
• Strong experience with networking and security policies, including planning and execution.
• Proficient in designing secrets management, KMS, and token vaults.
• Experience in scoping pentests and reviewing remediation strategies.
• Knowledge of Google Cloud security (IAM, VPC, firewall, and perimeter security).
• Experience with API security and OAuth token management.
• Familiarity with hardening containers and Kubernetes in a Google Cloud environment.

Nice-to-have

• Knowledge of compliance requirements such as SOC 2, ISO 27001, and GDPR for SaaS solutions.
• Professional Cloud Security Engineer or Professional Cloud Network Engineer certification.

PALO IT's consultants come from diverse backgrounds. If your profile doesn't match this description 100%, you're still encouraged to apply.

More About PALO IT

Why join PALO IT as an AI Native Security and Networking specialist?

• A forward-thinking, collaborative environment join a passionate international team pushing the boundaries of AI-native development.
• Continuous personal and professional growth through PALO IT Academy, specialized training, R&D projects, and a knowledge-sharing culture.
• Global opportunities international mobility and collaboration with visionary clients and frontier tech partners.
• Empowerment to innovate shape and implement next-level AI methodologies as part of a collective intelligence.
• Competitive compensation and benefits reflecting your skills, impact, and leadership.

More on PALO IT's team culture and benefits is available on the PALO IT careers page.

Diversity, equity and inclusion

As a B Corp, PALO IT provides equal opportunities and assesses candidates solely on skills, potential, and motivation. PALO IT welcomes applications regardless of gender identity or expression, sexual orientation, age, background, ethnicity, religion, disability, or any other protected attribute.

Frequently Asked Questions About This Role

Q: What is the work model for this position?

A: Hybrid, 1 day per week at the office in CMDX or Bogota

Q: What technologies will I be working with?

A: Ruby, Ruby on Rails, PostgreSQL, Redis, Kubernetes, and Google Cloud services

Q: Are there opportunities for international travel?

A: No