Security Engineer (AI & Cloud Security)

About the role

Clara, a Latin American payment platform, is hiring a Security Engineer for a remote-first role. You will own outcomes across the security function, lead workstreams on AI security, cloud and application security, and mentor early-career engineers. The position is based in Bogotá or Mexico City.

Key responsibilities

• Own the AI security posture: define controls for LLMs, coding agents, agentic browsers and MCP integrations, and run the LLM-based SIEM investigation agent
• Threat-model AI systems and build safe adoption guidance for product and engineering
• Cloud security on AWS and GCP: detection, IAM, network controls, guardrails as code, and identity and edge security (Auth0, Cloudflare, Google Workspace)
• Application security: SAST, dependency and secrets scanning, CI/CD hardening, code reviews and pentest coordination
• Detection and incident leadership: Splunk detections, incident response via incident.io, and email/web protection and phishing program
• Map controls to PCI DSS and ISO 27001 and support customer security reviews

Required profile

• 2-4 years in security engineering, cloud or application security, with hands-on production experience
• Strong AWS and/or GCP security knowledge and the ability to read and write infrastructure as code (Terraform or similar)
• Programming in at least one language (Python, Go, JavaScript/TypeScript) to build tooling and automation
• Experience with a SIEM (Splunk preferred) and an EDR platform, and hands-on LLM system experience
• Spanish and English; comfort with pace and ambiguity

Required skills

• AWS and GCP security, IAM, network controls, logging and detection
• Splunk, Auth0, Cloudflare, SonarQube, Terraform
• Nice to have: fintech experience, Kubernetes security, detection-as-code, certifications (AWS Security Specialty, OSCP, CISSP, etc.)

What we offer

• Direct exposure to leadership and to the decisions shaping Clara's use of AI
• Modern stack (AWS, GCP, Splunk, Auth0, Cloudflare, SonarQube, incident.io) and a team that values evidence over hierarchy
• Budget and time for certifications, conferences and the hacker community
• Competitive salary and stock options (ESOP) from day one, plus an annual learning budget