Security Engineer

Kutir Technologies; México; On-site; MXN 700,000 - 900,000; Full time

Job summary

Kutir Technologies is looking for a hands-on Security Engineer to protect our network, cloud infrastructure and applications. You will own the security of our edge and network layer (with Cloudflare as the core platform), manage security configurations as code with Terraform, strengthen our AWS cloud security posture, and embed security into the software development lifecycle.

This is a great opportunity for an engineer who enjoys working across multiple security domains and wants to make a

Qualifications

• 5+ years of experience in security engineering, DevSecOps or cloud security roles.
• Bachelor's degree in Computer Science, Information Security or related field (or equivalent).
• Strong problem-solving skills and ability to work across multiple security domains.
• Good communication skills and ability to work with engineering, compliance and leadership teams.

Responsibilities

• Design, implement and maintain security controls in Cloudflare (WAF, rate limiting, DNS, DDoS protection).
• Configure and tune rate limiting policies to prevent abuse and attacks.
• Deploy, monitor and respond to alerts from IDS/IPS.
• Manage DNS records and configurations securely.
• Manage IaC security configurations using Terraform.
• Support risk assessments and help define, document and maintain security policies and procedures.
• Contribute to compliance efforts and audits (SOC 2, ISO 27001, PCI-DSS).
• Track and report on security risks, findings and remediation status.
• Monitor and improve the security posture of AWS environment.
• Run vulnerability scanning with AWS Inspector and Trivy.
• Prioritize vulnerabilities and work with engineering teams on remediation.
• Integrate SAST and DAST testing into CI/CD pipelines.
• Use Snyk to identify and remediate vulnerabilities in code and open-source dependencies.
• Generate and maintain SBOMs.
• Implement PII scanning to detect and protect data.
• Partner with developers to promote secure coding practices.

Skills

Cloudflare

Terraform

AWS

Trivy

AWS Inspector

Snyk

SAST

DAST

SBOM

PII scanning

CI/CD

Kubernetes

Education

Bachelor's degree in Computer Science, Information Security or related field

Tools

Terraform

AWS Inspector

Trivy

Snyk

GitHub Actions

Kubernetes

Job description

We are looking for a hands-on Security Engineer to protect our network, cloud infrastructure and applications. In this role, you will own the security of our edge and network layer (with Cloudflare as the core platform), manage security configurations as code with Terraform, strengthen our AWS cloud security posture, and embed security into the software development lifecycle. You will also support Governance, Risk & Compliance (GRC) initiatives, helping the organization meet industry standards and regulatory requirements.

This is a great opportunity for an engineer who enjoys working across multiple security domains and wants to make a direct impact in a fast-paced environment.

Key Responsibilities Network Security (Top Priority)

• Design, implement and maintain security controls in Cloudflare, including WAF rules, bot management and DDoS protection.
• Configure and tune rate limiting policies to prevent abuse and attacks.
• Deploy, monitor and respond to alerts from IDS (Intrusion Detection Systems).
• Manage DNS records and configurations securely.
• Manage all network security configurations as Infrastructure as Code (IaC) using Terraform.

Governance, Risk & Compliance (GRC)

• Support risk assessments and help define, document and maintain security policies and procedures.
• Contribute to compliance efforts and audits (e.g., SOC 2, ISO 27001, PCI-DSS).
• Track and report on security risks, findings and remediation status.
• Monitor and improve the security posture of our AWS environment.
• Run and manage vulnerability scanning with AWS Inspector and Trivy (containers, images and IaC).
• Prioritize vulnerabilities and work with engineering teams on remediation.

Application Security

• Integrate SAST and DAST testing into CI/CD pipelines.
• Use Snyk to identify and remediate vulnerabilities in code and open-source dependencies.
• Generate and maintain SBOMs (Software Bill of Materials).
• Implement PII scanning to detect and protect sensitive personal data.
• Partner with developers to promote secure coding practices.

Technical Skills Must-Have

• Hands-on experience with Cloudflare (WAF, rate limiting, DNS, DDoS protection).
• Strong experience with Terraform for Infrastructure as Code.
• Solid knowledge of network security fundamentals (firewalls, IDS/IPS, TCP/IP, DNS, TLS).
• Experience securing AWS environments.
• Experience with vulnerability scanning tools such as Trivy and AWS Inspector.
• Experience with application security tools and practices: SAST, DAST, SBOM, Snyk.

Nice-to-Have

• Experience in the financial industry (banking, fintech, payments, insurance).
• Familiarity with compliance frameworks such as SOC 2, ISO 27001 or PCI-DSS.
• Experience with CI/CD tools (GitHub Actions, GitLab CI, Jenkins).
• Experience with containers and Kubernetes.
• Security certifications (e.g., AWS Security Specialty, CISSP, CompTIA Security+, CCSP).

Qualifications

• 5+ years of experience in security engineering, DevSecOps or cloud security roles.
• Bachelor's degree in Computer Science, Information Security or a related field (or equivalent experience).
• Strong problem-solving skills and ability to work across multiple security domains.
• Good communication skills and ability to work with engineering, compliance and leadership teams.