Head of Security Engineering

Base Labs; Ciudad de México; Presencial; MXN 1.200.000 - 1.800.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical insurance

Descripción de la vacante

Base Labs seeks a Head of Security Engineering in Mexico City to own and scale a mature security program. This hands-on leader will secure platforms, cloud infrastructure, and endpoints, and manage the money movement security and compliance efforts.

You will work closely with engineers to implement controls and drive ISO 27001, SOC 2, or NIST standards, while leading incident response and disaster recovery testing.

Formación

• 5+ years in security engineering, appsec, or cloud security.
• Hands-on engineering ability; read code and fix issues.
• Experience with ISO 27001, SOC 2, or NIST.
• Practical OWASP Top 10 experience in production environments.

Responsabilidades

• Secure the platform, cloud infrastructure, corporate systems and endpoints.
• Secure the money movement path (transaction approval, withdrawal controls, credentials).
• Harden cloud and Kubernetes, infrastructure as code.
• Conduct security reviews with engineers and fix issues.
• Advance ISO 27001 certification, audits and due diligence with banking partners.
• Lead incident response, on-call rotation, and business continuity/disaster recovery testing.

Conocimientos

Security engineering

AppSec / cloud security

OWASP Top 10

ISO 27001 / SOC 2 / NIST

Security certifications

Professional English

Descripción del empleo

Head of Security Engineering (Mexico City)

Scheme: Full-time, Onsite (Polanco)

Time: Monday - Friday from 9:00 am to 7:00 pm.

Our client, a fast-growing fintech operating across the US, Mexico, Colombia and Peru, is hiring their first dedicated security leader. This is a hands on role reporting to the CTO, owning and scaling an already mature security program

What you’ll own:

• Security across the platform, cloud infrastructure, corporate systems and endpoints
• The security of the money movement path (transaction approval, withdrawal controls, credentials)
• Cloud and Kubernetes hardening, codified as infrastructure as code
• Application and infrastructure security reviews, working directly with engineers to fix issues
• ISO 27001 certification progress, audits, and banking partner due diligence
• Incident response, on call rotation, and business continuity/disaster recovery testing

What you bring:

• 5+ years in security engineering, appsec, or cloud security, ideally in fintech, payments or banking
• Real hands on engineering ability. You can read code, understand auth flows, and fix what’s broken
• Practical OWASP Top 10 experience in production environments
• Experience implementing ISO 27001, SOC 2, or NIST
• Certifications like OSCP, CISSP, or ISO 27001 Lead Implementer are a plus
• Professional English
• Based in Mexico City or willing to relocate. In person from the Polanco office

Our offer:

• A competitive salary package with medical insurance.
• Participation in our client’s employee stock option plan.
• Direct access to the CTO and full ownership of how security is run.
• The freedom to create your own entrepreneurial experience by being part of a team of people in search of excellence.