Sr. Security Engineer - Mexico / Latam

Yalo Inc.; A distancia; MXN 700,000 - 900,000; Jornada completa

Descripción de la vacante

Una empresa innovadora en comercio conversacional busca un profesional en seguridad de la información para alinear las mejores prácticas de seguridad y la estrategia empresarial. El rol incluye la gestión de programas de seguridad y la implementación de estrategias para fortalecer la postura de seguridad. Se requiere más de 5 años de experiencia en el campo, fluidez en inglés y conocimientos en varias herramientas de seguridad. La empresa ofrece un ambiente de trabajo flexible y remoto, así como políticas de tiempo libre ilimitadas.

Servicios

Política de PTO ilimitado

Compensaciones competitivas

Trabajo remoto disponible

Formación

• Más de 5 años de experiencia en Seguridad de la Información y arquitectura de seguridad.
• Experiencia en herramientas de seguridad en la nube.
• Conocimiento profundo del ciclo de vida del desarrollo de software seguro.

Responsabilidades

• Comunicar requisitos de seguridad y riesgos de manera clara.
• Gestionar y mejorar programas de seguridad.
• Monitorear e incrementar indicadores clave de seguridad.

Conocimientos

Experiencia en Seguridad de la Información

Conocimientos en Cloud y seguridad de red

Fluidez en inglés

Descripción del empleo

Descripción del trabajo

Yalo:

Hi! This is Yalo! We are on a mission to bring conversational commerce to the world. Remember how it used to be to interact with businesses that knew and understood you, that could recommend exactly what you needed, and that with a simple message could get you what you wanted? Yep... neither do we. That is why at Yalo we are marrying the scale of digital commerce with the personalization and simplicity of conversations to help companies delight their users.

We know that traditional SAAS companies focus on first world problems... we don't! Having started in Latin America, our roots are in Emerging Markets and therefore we care about bringing amazing experiences to a population that traditionally has been underserved, such as the small shop owner in Brazil that is ordering online for the first time.

If you're looking for a place to make things happen, learn fast, and impact emerging markets in a way that hasn't been done before, look no further. Come join us in our mission of improving billions of lives through the power of conversational commerce!

Your mission

You will align security best practices from the industry with technology solutions and business strategy to help Yalo achieve top security framework certifications. Additionally, you will foster a culture of continuous improvement, raising awareness and understanding of important security practices and considerations throughout the company.

What are the responsibilities for this role?

• Communicate security requirements, risks, and recommendations clearly and concisely.
• Manage and enhance security programs with a focus on continuous improvement.
• Implement strategies to strengthen security posture.
• Monitor and improve security key performance indicators (KPIs) related to threat intelligence, vulnerabilities management, and risk assessment.
• Create, update, and maintain security processes, procedures, and policies according to industry standards and regulatory requirements.
• Provide recommendations and implement controls to meet compliance requirements for various standards (e.g., SOC2, PCI DSS, ISO *****, GDPR, NIST, LFPDPPP).
• Support in the process to respond to customers' security inquiries and assessment.
• Collaborate effectively with cross-functional teams, stakeholders, and external partners/vendors.
• Ensure alignment with DevOps principles while maintaining security standards and compliance requirements.

Job Requirements

Must Have:

• 5+ years of experience in Information Security, AppSec, Security Architecture.
• Deep expertise in Cloud, Linux and network security (certifications are a plus).
• Deep understanding of Cloud Security tools.
• Deep understanding of Secure Software Development Life Cycle.
• Fluent/Advanced proficiency in English, Spanish is a plus.

Nice to have:

• Collaborate effectively with DevOps teams to embed security into every stage of the software development lifecycle (SDLC).
• Successful experience with Security and Privacy compliance certifications.

Soft skills that matter to us

• Excellent time-management skills.
• Team player.
• Critical thinker and problem-solving skills.
• Sense of ownership and pride in your performance and its impact on company's success.
• Interpersonal and communication skills.

What do we offer

• Unlimited PTO policy.
• Competitive rewards on the market range.
• Remote working is available (-+3 hours CT).
• Flexible time (driven by results).
• Start-up environment.
• International teamwork.
• You and nothing else limit your career here.

We care, we keep it simple, we make it happen, we strive for excellence.

At Yalo, we are dedicated to creating a workplace that embodies our core values: caring, initiative, excellence, and simplicity. We believe in the power of diversity and inclusivity, where everyone's unique perspectives, experiences, and talents contribute to our collective success. As we embrace and respect our differences, we strive to create something extraordinary for the benefit of all.

We are proud to be an Equal Opportunity Employer, providing equal opportunities to individuals regardless of race, color, religion, national or ethnic origin, gender, sexual orientation, gender identity or expression, age, disability, protected veteran status, or any other legally protected characteristic. Our commitment to fairness and equality is a fundamental pillar of our company.

At Yalo, we uphold a culture of excellence. We constantly challenge ourselves to go above and beyond, delivering remarkable results and driving innovation. We encourage each team member to take initiative and make things happen, empowering them to bring their best ideas forward and contribute to our shared goals.