Security Engineer (Ingeniero/a de Seguridad)

Clara · Bogota D.C. / DC / Colombia; Mexico City / CMX / Mexicosenior

In short

▸Ingeniero de seguridad que lidera la postura de IA y seguridad cloud en AWS/GCP.
▸Trabaja en detección, respuesta a incidentes y hardening de CI/CD con enfoque en seguridad proactiva.
▸Destacado: es líder en la gestión de riesgos de IA, incluyendo modelos generativos y agentes autónomos.

Native or professional proficiency in English required

In ~1 minute you get: who interviews you, the likely questions answered from your CV, and your CV tailored to this job. Free, no card.

🎧Land the interview? Bring the copilot. Our free extension listens to the live interview and flashes 3-4-word anchors from your resume and prep — glance, connect, talk. Get the extension →

What they ask for

✓Experiencia en seguridad de nube en AWS o GCP
✓Conocimiento en seguridad de aplicaciones y CI/CD
✓Experiencia con SIEM (Splunk) y detección de amenazas
✓Habilidades en seguridad de IA: LLMs, agentes, prompt injection
✓Capacidad para definir guardrails como código y políticas de seguridad
✓Experiencia liderando investigaciones de incidentes y response

Don't tick every box? That's normal — your free dossier shows your gaps and how to cover them in the interview.

AWSGCPGuardDutySecurity Command CenterIAMVPCCloudTrailAuth0CloudflareGoogle Workspace

Who should you write to at Clara?

Your free dossier identifies the people who'd interview you — their background, what they value, and how to reach out so you stand out before applying.

Ready to accelerate your career? Clara is the fastest-growing company in Latin America. We've built the leading solution for companies to make and manage all their payments. We already help over 20,000 large and growing businesses operate with agility and financial clarity through locally issued corporate cards, bill pay, financing, and a powerful B2B platform built for scale. Clara is backed by some of the most successful investors in the world, including top regional VCs like monashees, Kaszek, and Canary, and leading global funds like Notable Capital, Coatue, DST Global Partners, ICONIQ Growth, General Catalyst, Citi Ventures, SV Angel, Citius, Endeavor Catalyst, and Goldman Sachs - in addition to dozens of angel investors and local family offices. We’re building the financial infrastructure that powers high-performing organizations across the region. We invite you to join us if you want to be part of a fast-paced environment that will accelerate your career and support you to do some of the best work of your life alongside a passionate and committed team distributed across the Americas. Security Engineer What you'll do You will own outcomes, not a queue. You'll lead workstreams across the security function, pair with and mentor early-career engineers, and be trusted to make calls without waiting for sign-off. Own the AI security posture, enabling rather than blocking • Define and operate the controls for how Clara uses LLMs, coding agents, agentic browsers, MCP integrations and internal inference gateways: data handling, identity, permissions, logging • Own the LLM-based investigation agent on the SIEM: design its instructions and rules, evaluate its accuracy, catch hallucinated attributions and unsupported conclusions, and decide what it is allowed to close autonomously • Threat-model AI systems as first-class attack surface: prompt injection, data exfiltration through AI tools, over-privileged agents, model and tool supply chain • Build the guidance and paved paths that let product and engineering adopt AI safely by default, and be a credible voice in those decisions Cloud security on AWS and GCP • Own detection and posture across AWS (GuardDuty, IAM, VPC, CloudTrail) and GCP (Security Command Center, IAM, service accounts, org policies), and drive remediation with the owning teams • Design and implement guardrails as code: organization policies, SCPs, IAM boundaries, infrastructure-as-code policy checks • Lead parts of our large-scale GCP project inventory and cleanup program, and turn one-off findings into automated controls • Secure identity and edge: Auth0, Cloudflare, Google Workspace, SSO and service-to-service authentication Secure code, CI/CD and application security • Run and evolve the application security program: SAST (SonarQube, Semgrep or similar), dependency and secrets scanning, PR review for security-sensitive changes, and CI/CD pipeline hardening • Review architecture and code for new products and integrations (card issuing, payments, banking partners) and produce actionable, prioritized findings • Define secure-by-default patterns and libraries for engineers, including for AI-generated code, and measure whether they're being used • Coordinate pentests and vulnerability disclosure, and drive findings to closure Detection, response and incident leadership • Build and tune detections in Splunk across identity/SSO, cloud, endpoint, email and network sources, with a bias toward high-signal alerts • Lead incident investigation and response through incident.io: scoping, c

Don't apply unprepared

We research who's interviewing you, tailor your CV and rehearse you live — first one free.