Platform and Security

Nuvnext; Región Centro; Hybrid; MXN 550,000 - 900,000; Full time

Job summary

Nuvnext in Guadalajara, Mexico, is seeking an in-person Security Engineer to own deployments, databases and monitoring for our platform and client projects. You will review data access policies, respond to incidents, and document changes.

The role emphasizes preventing incidents, maintaining strong access controls, and continuous improvement in security with a hands-on, operations-focused team. You will work directly with founders, contribute to security governance, and help ensure SOC 2

Qualifications

• Has run something in production and watched it break
• Understands access control, secrets and row-level policies in databases
• Documents what you do so someone else can repeat it
• Prefers prevention over firefighting and knows how to resolve incidents

Responsibilities

• Run deployments, databases and monitoring for the platform and client projects
• Review data access policies, secrets and per-client permissions
• Own the security standard: sweeps, evidence and quarterly review
• Respond to incidents and write down what happened and what changed

Skills

Production deployment experience

Access control & row-level policies

Documentation

Incident prevention

Tools

PostgreSQL

Supabase

Sentry

GitHub Actions

TypeScript

Job description

Engineering Guadalajara · in person Full time

Clients give us access to their operation. You make sure that access is well kept: the infrastructure, the monitoring, the permissions and the security standard every Nuvnext project meets.

The role

• Run deployments, databases and monitoring for the platform and for client projects.
• Review data access policies, secrets and per-client permissions.
• Own the security standard: sweeps, evidence and the quarterly review.
• Respond to incidents and write down what happened and what changed.

Your first 90 days

• Day 30

  You learn the infrastructure and the standard; you close your first findings.

• Day 60

  You run the security sweep of a complete project with its evidence.

• Day 90

  You own monitoring and incident response for the platform.

Stack and tools

Vercel Supabase / Postgres Sentry GitHub Actions TypeScript

What we look for

Must have

• You have run something in production and watched it break.
• You understand access control, secrets and row-level policies in databases.
• You document what you do so someone else can repeat it.
• You would rather prevent than put out fires, and you know how to put them out.

Nice to have

• Experience with SOC 2, ISO 27001 or similar frameworks.
• Postgres and Supabase in production.
• Web application security.

What working here is like

What you build goes into products that operate real organizations. You work directly with the founders, with no layers between your code and production, under the same rule we give the intelligence: a person signs what is critical.