Senior Cloud Security Engineer — In-Office (Mexico City)

Nelo; Ciudad de México; Presencial; MXN 600.000 - 900.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

401k

Open PTO

Medical insurance

Dental

Vision

STD

LTD

Fertility benefits

Descripción de la vacante

Nelo, a leading fintech in Mexico City, seeks a hands-on Security Engineer to own security across the stack. You will design guardrails, harden AWS with Terraform, and build automated controls that empower velocity with risk reduction.

You'll work closely with CTO, CEO, and engineering leadership, driving SOC 2 readiness and automation of evidence collection. This in-person role requires building security into product and operations from day one.

Formación

• Engineering background with substantial time spent on security in production environments.
• Strong hands-on experience with cloud security fundamentals, ideally on AWS.
• Comfortable building and modifying infrastructure with Terraform or equivalent IaC tooling.
• You ship code and own outcomes, not just recommendations.

Responsabilidades

• Build secure-by-default systems across cloud infrastructure and developer workflows.
• Design and implement security guardrails across cloud infrastructure and developer workflows.
• Improve IAM, secrets management, endpoint management, and access controls across production systems.
• Harden AWS infrastructure using Terraform and policy-as-code.
• Increase observability for security-relevant events and anomalies.
• Write code, configs, and tooling to enforce controls and automate reviews.
• Own penetration tests and the bug bounty program end-to-end.
• Drive SOC 2 Type 1 and Type 2 readiness with automated evidence collection.

Conocimientos

Cloud security

AWS experience

IaC tooling

Coding / scripting

Ownership of outcomes

Herramientas

Terraform

CloudTrail

GuardDuty

Descripción del empleo

Nelo, a leading fintech in Mexico City, seeks a hands-on Security Engineer to own security across the stack. You will design guardrails, harden AWS with Terraform, and build automated controls that empower velocity with risk reduction.

You'll work closely with CTO, CEO, and engineering leadership, driving SOC 2 readiness and automation of evidence collection. This in-person role requires building security into product and operations from day one.