Security Engineer (Early Career) (Ingeniero/a de Seguridad - Carrera Temprana) - Mexico City (Remote)
About this role
Clara is building the financial infrastructure and leading B2B spend management solution that powers high-performing organizations across Latin America. The security team protects this growing ecosystem through hands-on cloud defense, secure code practices, detection engineering, and proactive AI security tooling.
This early-career security engineer will complete a rotational program during the first year, taking on real ownership across cloud security, secure code review, and threat detection. Day-to-day work involves reviewing LLM guardrails, triaging AWS and GCP findings, analyzing Splunk logs, and partnering with developers to resolve vulnerabilities while maintaining velocity.
Ideal candidates bring a foundational technical background from internships, bug bounties, or personal projects combined with a healthy skepticism of automated tools. Someone who thrives in a fast-paced environment and prefers learning directly through hands-on investigation will find significant growth here.
What you will do
- Review how engineering teams use LLMs and coding agents to help define guardrails that protect company data.
- Operate and tune an LLM-based investigation agent on the SIEM to catch hallucinated attributions and noisy alerts.
- Triage findings from AWS GuardDuty, GCP Security Command Center, IAM, and network configuration reviews.
- Manage SonarQube and dependency-scanning results for internal repositories while prioritizing CVEs with developers.
- Write and refine Splunk queries to investigate alerts spanning identity, cloud, endpoint, email, and network sources.
- Monitor the EDR console, investigate suspicious endpoints, and execute host containment alongside senior engineers.
What you need
- Have 1 to 2 years of experience in security, IT, software engineering, or a related technical role.
- Demonstrate working knowledge of at least one major cloud provider such as AWS or GCP.
- Show comfort working in the command line using bash and reading JSON, logs, and code in a common language like Python, JavaScript, or Go.
- Possess basic familiarity with a log query language like SPL or KQL, or the drive to become fluent quickly.
- Understand conceptual identity and authentication standards including OAuth, SSO, MFA, and service-to-service auth.
- Bring hands-on experience using generative AI tools in a technical context alongside a verify-before-you-conclude instinct.
- Demonstrate strong written communication skills in both Spanish and English.
Nice to have
- Prior exposure to a SIEM, EDR console, or email and web security platform
- Python or JavaScript for scripting and automation
- Experience with SAST, dependency scanning, secrets management, or CI/CD security
- Experience prompting or building with LLM APIs, agents, or MCP tooling
- Entry-level certifications such as Security+, AWS Cloud Practitioner, or Associate Cloud Engineer
Benefits
- Competitive salary and stock options from day one
- Multicultural team with daily exposure to Portuguese, Spanish, and English
- Annual learning budget and internal accelerated development paths
- High-ownership environment with a hybrid work model focused on results
- Flexible vacation policy
Skills and tech stack
Questions candidates ask
What is the remote work policy for this role?
The position follows a hybrid work model based out of Mexico City, focusing primarily on results.
What does the hiring process look like?
The hiring process includes an application review, a technical conversation about real scenarios without gotcha puzzles, a practical exercise you can complete in a few hours, and a conversation with the team.
What technologies and tools will I work with?
You will work with a modern stack that includes AWS, GCP, Splunk, Auth0, Cloudflare, SonarQube, incident.io, Claude, and internal AI tooling.
What kind of growth and development support is available?
The company provides an annual learning budget and internal accelerated development paths, along with a senior team that pairs with you on investigations and reviews.