Senior Security Engineer, Detection & Response

• Build, operate, and mature SIEM/XDR capabilities, including log ingestion, detection rules, alert tuning, and investigation workflows
• Design detection strategies for suspicious activity and data exfiltration using application and database telemetry
• Extend audit and attribution coverage across Kubernetes, databases, SSO, and access paths, with compliant retention
• Investigate and respond to security incidents across cloud infrastructure and applications
• Perform root cause analysis and drive long-term remediation
• Conduct proactive threat hunts across cloud and identity planes
• Build repeatable agentic threat-hunting workflows
• Operate vulnerability management across infrastructure, platforms, and applications
• Triage and validate external security findings and bug-bounty reports
• Coordinate remediation with engineering teams
• Contribute to threat modeling and security design reviews
• Apply AWS and Kubernetes expertise to secure systems and advise owning teams
• Support security controls aligned with PCI DSS, SOC 2, and other compliance requirements
• Develop automation, including AI, for security operations, detection, and response
• Participate in the on-call rotation for detection and response and owned services
• Report to the Director of Information Security and collaborate with security platform, network, and zero-trust engineers

• 6+ years of experience in security, software, or infrastructure engineering
• Hands-on experience securing cloud-based production systems
• Experience with SIEM platforms such as Wazuh, Splunk, or ELK
• Experience designing and tuning detection rules, reducing alert noise, and improving investigation workflows
• Strong hands-on vulnerability-management experience, including scanning, triage, validation, remediation coordination, and verification
• Strong knowledge of AWS, Linux, and Kubernetes infrastructure, security architecture, and operational best practices
• Ability to investigate issues using logs, cloud tooling, and system-level data
• Experience assessing detection and logging implications in design reviews
• Knowledge of common security vulnerabilities and mitigation strategies, including OWASP and SANS
• Working knowledge of PCI DSS and SOC 2 compliance frameworks
• Demonstrated current use of AI tooling such as Claude Code, Codex, Cursor, or custom LLM integrations
• Preferred: AI-assisted workflow development, log-based detection, telemetry pipelines, internal penetration testing, cloud-native security controls, container and dependency security tools, regulatory compliance alignment, and fintech/payments experience

• Competitive gross salary of $5,000–$9,500 USD per month, based on experience level
• AI-assisted engineering and agentic workflows as part of standard work practices
• Open-source-focused technology environment
• Full-time remote work in Mexico