Security Engineer (Ingeniero/a de Seguridad)
About this role
Protecting financial infrastructure and securing large-scale cloud environments presents a complex operational challenge at Clara. This role exists to take charge of the security function without waiting for oversight, ensuring that fast-moving product teams can innovate safely while managing critical risks across AWS and GCP platforms.
The person who succeeds in this position will design controls for modern generative AI deployments, build automated guardrails, and lead detection engineering efforts. Working alongside a distributed team across the Americas, this engineer balances technical depth with pragmatic risk management to protect corporate payments infrastructure and B2B platforms.
What you will do
- You will define and operate security controls for LLMs, coding agents, and internal inference gateways.
- You'll threat-model AI systems to address prompt injection, data exfiltration, and over-privileged agents.
- You will own detection and posture management across AWS and GCP infrastructure.
- You'll run the application security program by executing SAST, dependency scanning, and CI/CD pipeline hardening.
- You will build and tune high-signal detections in Splunk across identity, cloud, and network sources.
- You'll map security controls to compliance frameworks such as PCI DSS and ISO 27001.
What you need
- You have two to four years of experience in security engineering, cloud security, application security, or a closely related role.
- You possess strong practical knowledge of AWS and GCP security including IAM design, network controls, and infrastructure as code.
- You demonstrate solid programming ability in at least one language such as Python, Go, or JavaScript/TypeScript.
- You have real secure-code experience to identify and mitigate injection, authorization, and secrets handling issues.
- You bring hands-on experience with SIEM platforms like Splunk and EDR solutions for detection engineering and investigation.
- You communicate fluently in both Spanish and English to collaborate with engineers, product managers, and auditors.
Nice to have
- Experience in fintech, payments or another regulated environment (PCI DSS, ISO 27001, SOC 2)
- Experience securing or red-teaming LLM applications, agents or MCP tooling
- Kubernetes and container security
- Detection-as-code, SOAR or security automation experience
- Certifications such as AWS Security Specialty, Google Professional Cloud Security Engineer, OSCP, GIAC or CISSP
Skills and tech stack
Questions candidates ask
What is the tech stack used in this role?
You will work with AWS, GCP, Splunk, Auth0, Cloudflare, SonarQube, incident.io, Claude, and internal AI tooling.
What does the hiring process look like?
The process includes an application review, a technical deep-dive on real scenarios you've handled, a practical exercise, and conversations with the team and leadership.
What kind of experience is required for this position?
Candidates need two to four years in security engineering, cloud security, application security, or a closely related engineering role, including hands-on production experience.