{"id":779109,"url":"https://alion.io/job/clara-security-engineer-ingenieroa-de-seguridad","title":"Security Engineer (Ingeniero/a de Seguridad)","company":{"id":57887,"name":"Clara","domain":"clara.com","url":"https://alion.io/company/clara-com","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":85,"open_postings":21,"ghost_share":0,"stale_share":0.381,"repost_share":0,"time_to_fill_p50_days":68,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Mexico City, Mexico","Bogotá, Colombia"],"countries":["MX","CO"],"hiring_countries":["MX","CO"],"hiring_countries_total":2,"salary":null,"salary_estimate":{"min_usd":24000,"max_usd":69000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":623},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Auth0","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Cloudflare","optional":false},{"name":"GCP","optional":false},{"name":"Google Workspace","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"JavaScript","optional":false},{"name":"LLM","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"Semgrep","optional":false},{"name":"SIEM","optional":false},{"name":"SonarQube","optional":false},{"name":"Splunk","optional":false},{"name":"Terraform","optional":false},{"name":"TypeScript","optional":false},{"name":"AI Agents","optional":true},{"name":"Claude","optional":true},{"name":"Kubernetes","optional":true},{"name":"SOC 2","optional":true}],"status":"closed","first_seen_at":"2026-09-12T00:03:50Z","employer_posted_date":"2026-10-11","last_verified_at":"2026-11-10T01:49:12Z","board_verified":false,"closed_at":"2026-11-10T01:49:12Z","days_open":59,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":59},"description":"Clara is the leading platform in Latin America for companies to execute and manage every payment operation. More than 50,000 leading and fast-growing businesses run on our corporate cards, bill pay, financing and B2B payments, and in 2025 the Financial Times named Clara the region’s fastest-growing company. We’re passionate about helping every company we work with become more effective-and, through that, raising the region’s competitiveness. We’re ~400 people, backed by Notable Capital, Coatue, Kaszek, monashees, DST Global, ICONIQ, General Catalyst and Goldman Sachs, among others.\nSecurity Engineer\nWhat you'll do\nYou will own outcomes, not a queue. You'll lead workstreams across the security function, pair with and mentor early-career engineers, and be trusted to make calls without waiting for sign-off.\nOwn the AI security posture, enabling rather than blocking\nDefine and operate the controls for how Clara uses LLMs, coding agents, agentic browsers, MCP integrations and internal inference gateways: data handling, identity, permissions, logging\nOwn the LLM-based investigation agent on the SIEM: design its instructions and rules, evaluate its accuracy, catch hallucinated attributions and unsupported conclusions, and decide what it is allowed to close autonomously\nThreat-model AI systems as first-class attack surface: prompt injection, data exfiltration through AI tools, over-privileged agents, model and tool supply chain\nBuild the guidance and paved paths that let product and engineering adopt AI safely by default, and be a credible voice in those decisions\nCloud security on AWS and GCP\nOwn detection and posture across AWS (GuardDuty, IAM, VPC, CloudTrail) and GCP (Security Command Center, IAM, service accounts, org policies), and drive remediation with the owning teams\nDesign and implement guardrails as code: organization policies, SCPs, IAM boundaries, infrastructure-as-code policy checks\nLead parts of our large-scale GCP project inventory and cleanup program, and turn one-off findings into automated controls\nSecure identity and edge: Auth0, Cloudflare, Google Workspace, SSO and service-to-service authentication\nSecure code, CI/CD and application security\nRun and evolve the application security program: SAST (SonarQube, Semgrep or similar), dependency and secrets scanning, PR review for security-sensitive changes, and CI/CD pipeline hardening\nReview architecture and code for new products and integrations (card issuing, payments, banking partners) and produce actionable, prioritized findings\nDefine secure-by-default patterns and libraries for engineers, including for AI-generated code, and measure whether they're being used\nCoordinate pentests and vulnerability disclosure, and drive findings to closure\nDetection, response and incident leadership\nBuild and tune detections in Splunk across identity/SSO, cloud, endpoint, email and network sources, with a bias toward high-signal alerts\nLead incident investigation and response through incident.io: scoping, containment (EDR isolation, credential revocation, cloud access), root cause and post-incident review\nOwn email and web protection policy and the phishing program\nMentor early-career engineers on investigation technique and evidence-based reporting, and review their work\nCompliance as a byproduct of good engineering\nMap your controls to PCI DSS and ISO 27001 requirements, and produce the evidence auditors need without slowing the team down\nSupport customer security reviews and enterprise sales when a technical voice is needed\nWhat we look for\n2-4 years in security engineering, cloud security, application security or a closely related engineering role, including hands-on production experience\nStrong, practical knowledge of AWS and/or GCP security: IAM design, network controls, logging and detection, and the ability to read and write infrastructure as code (Terraform or similar)\nSolid programming ability in at least one language (Python, Go, JavaScript/TypeScript): you build tooling and automation, not just review other people's code\nReal secure-code experience: you can find and explain injection, auth/authz, secrets handling and supply-chain issues in code and in CI/CD pipelines, and you know how to get developers to fix them\nHands-on experience with a SIEM (Splunk preferred) and an EDR platform, including detection engineering and investigation\nWorking understanding of LLM-based systems and agents, including their failure modes, and experience using or building with them in a technical setting\nSound judgment on risk: you know the difference between a finding that blocks a launch and one that ships with a follow-up, and you can defend that call\nStrong written and spoken communication in Spanish and English; you can explain a risk to an engineer, a product manager and an auditor in the same week\nComfort with pace and ambiguity: priorities move, the stack evolves, and you'd rather build the process than wait for it\nNice to have\nExperience in fintech, payments or another regulated environment (PCI DSS, ISO 27001, SOC 2)\nExperience securing or red-teaming LLM applications, agents or MCP tooling\nKubernetes and container security\nDetection-as-code, SOAR or security automation experience\nCertifications such as AWS Security Specialty, Google Professional Cloud Security Engineer, OSCP, GIAC or CISSP\nPortuguese\nContributions to open source, conference talks or CTF/bug bounty track record\nWhat you'll get\nOwnership of problems that matter at a unicorn fintech, with direct exposure to leadership and to the decisions that shape how Clara adopts AI\nFrontier work: securing agentic AI in production, in a company that is actually deploying it\nA modern stack and the mandate to improve it: AWS, GCP, Splunk, Auth0, Cloudflare, SonarQube, incident.io, Claude and internal AI tooling\nA team that values evidence over hierarchy, and expects you to push back when the data doesn't hold\nBudget and time for certifications, conferences and the hacker community\nFast, transparent hiring: application review, a technical deep-dive on real scenarios you've handled, a practical exercise, and conversations with the team and leadership\nHow to stand out\nTell us about a control you designed that made engineers faster, not slower. Or an incident you led, a detection you built, a vulnerability you found, or something you've published. We care about how you think about risk and how you get things fixed, not about the length of your tool list.\nWhere we work\nThis is a remote-first role: you'll work from home day to day. You'll ramp up in person with the team, and come together in person for team moments, events and customer visits through the year.\nWhy Clara\n A high talent-density team driven to make an impact in Latin America - low ego, high ownership.\nCompetitive salary and stock options (ESOP) from day one.\nAn annual learning budget and accelerated development paths.\nEnglish is our working language, with Spanish and Portuguese every day.\nHow we work\nClarity - Open and direct communication: we say what we mean and give context where it matters.\nSimplicity - If it can be simpler, it should be.\nOwnership - We own everything we do, end to end. When something needs to happen, we don't wait.\nPride - We hold ourselves to a high standard, and it shows in what we deliver.\n ABC (Always Be Changing) - We adapt fast, embrace change, and keep learning.\n Inclusivity - Diverse ideas, stories and perspectives build a better Clara.\nIf you meet the must-haves, apply - the nice-to-haves are a bonus, not a requirement.","description_format":"text","description_chars":7546,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Spanish","level":"Upper-Intermediate (B2)","optional":false},{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Stock options"],"hiring_locations":[{"name":"Mexico","iso":"MX","kind":"country"},{"name":"Colombia","iso":"CO","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cards & Card Issuing","Business & SME Lending","Procurement & Spend Management"],"lifecycle":[{"event":"open","at":"2026-09-12T00:04:33Z"},{"event":"close","at":"2026-11-10T01:49:12Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/clara-security-engineer-ingenieroa-de-seguridad","json_url":"https://alion.io/job/clara-security-engineer-ingenieroa-de-seguridad.json","meta":{"generated_at":"2026-11-11T14:58:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27766,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":57887},"rest":"https://alion.io/mcp/rest/get_company?id=57887"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fclara-security-engineer-ingenieroa-de-seguridad"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fclara-security-engineer-ingenieroa-de-seguridad"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fclara-security-engineer-ingenieroa-de-seguridad"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/clara-security-engineer-ingenieroa-de-seguridad\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fclara-security-engineer-ingenieroa-de-seguridad"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":779109}},{"tool":"search_jobs","arguments":{"company":"clara.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":779109},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}