Security Engineer

Talently; México; Remote; MXN 1,116,000 - 1,674,000; Part time

Job summary

Talently is seeking a Security & Applications Operations Engineer to own internal systems, applications, and security operations, reporting to the Co-Founder & CTO. You’ll automate recurring tasks and manage the security program end-to-end in a fast-growing AI company.

The role covers SOC 2, internal apps, CI/CD and Salesforce administration, with emphasis on automation and independent ownership. 100% remote from Mexico, contractor via Deel, paid in MXN.

Qualifications

• Hands-on SOC 2 program experience with continuous control monitoring.
• Strong scripting and automation to replace manual checks.
• Experience managing SaaS administration and IAM.
• Experience with CI/CD, environment configuration and rollback.
• Familiarity with Salesforce configurations and integrations.
• Ability to own initiatives independently in a small team.

Responsibilities

• Own SOC 2 program end-to-end: controls, evidence, and audit readiness.
• Automate recurring compliance tasks and vulnerability management.
• Administer internal stack: Vanta, Snyk, ngrok, and Exa.
• Manage employee onboarding/offboarding, IAM and access controls.
• Own release processes for internal applications and pipelines.
• Evaluate tools and automate business workflows across teams.

Skills

SOC 2 program management

Automation scripting

SaaS administration / IAM

CI/CD / release operations

Salesforce administration

Ownership / independent work

English communication

Tools

Vanta

Snyk

ngrok

OpenRouter

Exa

Jamf

Kandji

Okta

Google Workspace

Job description

Security & Applications Operations Engineer

About the Company

We’re partnering with a fast-growing AI company that builds customer intelligence for B2B SaaS businesses. Its machine learning models analyze product telemetry, meaning how customers actually use a software product, to predict churn and expansion up to 12–18 months before renewal. Sales, Customer Success and Product leaders use those predictions to make better decisions.

The company recently closed its Series A and has received industry recognition for its machine learning work. Its product is self-hosted and deployed inside enterprise customers’ environments, so the company’s own security posture is something customers review before they buy.

About the Role

We’re looking for a hands-on, technically versatile Security & Applications Operations Engineer to own the internal systems, applications and security operations that keep the company running. You’ll report directly to the Co-Founder & CTO.

Today, engineering leadership handles SOC 2 evidence, access reviews, vulnerability triage, internal releases and tool administration. You’ll be the first person fully dedicated to this work. You’ll take these functions over, own them end to end, and automate as much of the recurring work as you can.

What You’ll Do

Security & Compliance

• Own the SOC 2 program end to end: control implementation, continuous monitoring in Vanta, evidence collection, documentation and audit readiness.
• Automate recurring daily, weekly and monthly compliance tasks down to minimal manual effort.
• Own vulnerability management across code, dependencies and endpoints in Snyk, plus access reviews and penetration testing programs.
• Maintain security policies, incident response procedures and the materials used to answer customer security reviews.

Internal Applications & IT Operations

• Administer the internal stack, including Vanta, Snyk, ngrok, OpenRouter and Exa: credentials, secrets, integrations, permissions, and model access and spend controls.
• Own employee onboarding and offboarding, endpoint devices, and identity and access management (SSO, MFA, role-based permissions).
• Administer secure remote access and tunneling with ngrok.

Release Operations

• Own the release process for internal applications and services: scheduling, environment configuration, versioning and rollback.
• Build and maintain build and deploy pipelines, environment provisioning and release runbooks.

Business Systems

• Own Salesforce administration: user permissions, configuration, workflows, automations and integrations.
• Evaluate new tools and automate manual processes across teams.

What We’re Looking For

• Hands-on experience running a SOC 2 program, including continuous control monitoring and evidence automation in Vanta, Drata or similar.
• Real scripting and automation skills. You should be able to replace a manual control check with a scheduled job.
• Experience with SaaS administration, IAM, endpoint management and employee onboarding/offboarding.
• Experience with release and environment operations: CI/CD, configuration, versioning and rollback.
• Comfort administering business applications such as Salesforce.
• Strong ownership and the ability to work independently as the only person focused on this area.
• Advanced English, since all interviews and daily work are in English.

Nice to Have

Snyk, ngrok, LLM gateways like OpenRouter, Jamf or Kandji, Okta or Google Workspace as an identity provider, and experience coordinating auditors, penetration testers and security vendors.

Conditions

• 100% remote from Mexico.
• Contractor position through Deel, paid in MXN.