DevSecOps Engineer

Tonder Technologies, Inc.; México; Remote; MXN 700,000 - 1,100,000; Full time

Job summary

Tonder seeks a DevSecOps Engineer to turn security and compliance into automated engineering systems. You will automate security controls across the SDLC, integrate security into CI/CD, and drive risk remediation from discovery to production.

You will own IAM, secrets management and cloud security, build PCI DSS compliant workflows, and leverage AI to accelerate security analysis and evidence collection across our AWS-based infrastructure.

Qualifications

• Strong AWS and cloud security experience.
• Knowledge of IAM, networking, secrets management, vulnerability management, and infrastructure security.
• Experience embedding security into CI/CD and engineering workflows.
• Strong Infrastructure as Code and security automation experience.
• Experience with regulated environments, PCI DSS, or similar frameworks is strongly preferred.
• Strong scripting or software engineering skills.
• Advanced use of AI for engineering, security analysis, and automation.
• High ownership and the ability to follow security projects through actual remediation, not just findings.

Responsibilities

• Build and automate security controls across our infrastructure and software development lifecycle.
• Automate vulnerability detection, dependency scanning, infrastructure scanning, remediation, and security monitoring.
• Own and improve IAM, secrets management, cloud security, access controls, and production guardrails.
• Drive security and compliance projects from requirement through implementation and completion.
• Automate PCI DSS and other security controls wherever technically possible.
• Build AI-assisted workflows for security analysis, monitoring, remediation, documentation, and evidence collection.
• Identify systemic security risks and build permanent controls instead of recurring manual fixes.

Skills

AWS security

Cloud security

IAM

Networking

Secrets management

Vulnerability management

Infrastructure security

CI/CD integration

IaC automation

PCI DSS experience

Scripting

AI in security

Ownership

Job description

Tonder operates critical payments infrastructure where security is part of the product.

We’re looking for a DevSecOps Engineer to turn security and compliance into automated engineering systems.

Our goal is to replace as much manual security work as possible with controls enforced through code, infrastructure, pipelines, monitoring, and AI-powered automation.

You’ll own security projects from identifying the requirement or risk through remediation, validation, and production.

What you’ll own

Build and automate security controls across our infrastructure and software development lifecycle.

Automate vulnerability detection, dependency scanning, infrastructure scanning, remediation, and security monitoring.

Own and improve IAM, secrets management, cloud security, access controls, and production guardrails.

Drive security and compliance projects from requirement through implementation and completion.

Automate PCI DSS and other security controls wherever technically possible.

Build AI-assisted workflows for security analysis, monitoring, remediation, documentation, and evidence collection.

Identify systemic security risks and build permanent controls instead of recurring manual fixes.

What we’re looking for

Strong AWS and cloud security experience.

Knowledge of IAM, networking, secrets management, vulnerability management, and infrastructure security.

Experience embedding security into CI/CD and engineering workflows.

Strong Infrastructure as Code and security automation experience.

Experience with regulated environments, PCI DSS, or similar frameworks is strongly preferred.

Strong scripting or software engineering skills.

Advanced use of AI for engineering, security analysis, and automation.

High ownership and the ability to follow security projects through actual remediation, not just findings.