{"id":702918,"url":"https://alion.io/job/latamcent-lead-security-and-infrastructure-engineer","title":"Lead Security and Infrastructure Engineer","company":{"id":678591,"name":"Latam Cent","domain":"latamcent.com","url":"https://alion.io/company/latamcent","size_band":"51-200","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Tampa, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":170000,"max":210000,"currency":"USD","period":"year","gross":null,"usd_annual":210000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Cloudflare","optional":false},{"name":"Ethereum","optional":false},{"name":"GCP","optional":false},{"name":"Google BigQuery","optional":false},{"name":"Google Cloud Run","optional":false},{"name":"MySQL","optional":false},{"name":"Node JS","optional":false},{"name":"Smart Contracts","optional":false},{"name":"TypeScript","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"CI/CD","optional":true},{"name":"DNS","optional":true},{"name":"IAM","optional":true},{"name":"ISO 27001","optional":true},{"name":"JavaScript","optional":true},{"name":"Least Privilege","optional":true},{"name":"PCI DSS","optional":true},{"name":"SOC 2","optional":true},{"name":"Threat Modeling","optional":true}],"status":"live","first_seen_at":"2026-08-14T16:10:00Z","employer_posted_date":"2026-08-14","last_verified_at":"2026-10-30T06:08:45Z","board_verified":true,"closed_at":null,"days_open":76,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":76},"description":"About the Role\nWe are looking for a hands-on Lead Security and Infrastructure Engineer to own security, infrastructure operations, and reliability across our cloud, application, and platform environments, including the on-chain rails behind our stablecoin payments.\nYou'll work directly with the CTO as the founding security and infrastructure hire, and someone the CTO can hand the keys to. You'll be responsible for hardening existing systems, building missing security and infrastructure capabilities, supporting production operations, and establishing the processes and tooling needed as the company scales.\nThe technology environment includes Google Cloud Platform, Cloud Run, BigQuery, MySQL, Node.js, TypeScript, and Cloudflare, alongside Ethereum and EVM-compatible networks, wallets, stablecoins, and smart contracts. No prior blockchain experience is required, this is a nice to have, not a gate.\nThis is an ownership role, not a devops role with a security task list. You'll hold full, end to end responsibility for the company's security, sensitive access and critical systems included, with enough infrastructure and DevOps fluency to operate comfortably in a lean, cloud native environment. Security is the center of gravity for this role, roughly two thirds of your time, with infrastructure operations and reliability making up the other third.\nWhat Success Looks Like in Your First 3-6 Months\nEstablish clear security ownership, access controls, secrets management, and secure defaults across production systems.\n\nImprove incident detection, response procedures, runbooks, and post-incident processes.\n\nStrengthen our cloud, Cloudflare, database, and deployment configurations against security and reliability risks.\n\nImprove observability across production infrastructure so issues are detected before they impact customers.\n\nValidate backup, disaster recovery, RTO/RPO, and restoration procedures through hands-on drills.\n\nEstablish a practical roadmap for the security and infrastructure function as the company scales.\n\nKey Responsibilities\nSecurity Engineering\nOwn the security posture across cloud, application, and on-chain systems.\n\nLead security incident response, including detection, containment, forensics, remediation, and blameless post-mortems.\n\nBuild security tooling, runbooks, and processes that improve incident response over time.\n\nEstablish secure defaults for secrets management, IAM, network segmentation, audit logging, and production access.\n\nOwn access governance, least-privilege policies, and separation of duties across production systems.\n\nConduct threat modeling, vulnerability management, and recurring security reviews.\n\nBuild detection and alerting for anomalous traffic, abuse, and scanning across Cloud Run, load balancers, and Cloudflare, turning logs into signal and signal into alerts people act on.\n\nOwn compliance and audit-readiness initiatives, including maintaining and maturing our existing SOC 2 program.\n\nBuild and drive security awareness across the team, from onboarding to ongoing training.\n\nRepresent security requirements with partners, customers, and internal stakeholders.\n\nInfrastructure Operations & Reliability\nOwn the infrastructure operations supporting production releases.\n\nBuild and improve CI/CD pipelines for deploying Cloud Run services safely and consistently.\n\nOwn release hygiene, including rollouts, rollbacks, deployment controls, and operational readiness.\n\nProvide hands-on operational support for production infrastructure.\n\nPerform maintenance, upgrades, troubleshooting, and toil reduction across the platform.\n\nBuild and maintain infrastructure-as-code and deployment automation on GCP.\n\nHarden Cloud Run, BigQuery, MySQL, and Cloudflare configurations.\n\nImprove logging, metrics, tracing, monitoring, and alerting.\n\nOwn reliability practices around capacity, backups, availability, and on-call operations.\n\nOwn disaster recovery capabilities, including RTO/RPO targets, database backups, point-in-time recovery, failover procedures, and DR runbooks.\n\nRun regular restoration drills and game days to validate recovery procedures.\n\nDigital Assets & On-Chain Exposure (Nice to Have)\nCuriosity about Ethereum and EVM integrations, including wallet and key management, transaction signing, and smart-contract interactions is a plus, not a requirement.\n\nWillingness to learn on-chain settlement flows and stablecoin operations as part of the role.\n\nRequirements\n8+ years fully owning a company's security posture end to end, with enough infrastructure and DevOps fluency to operate comfortably in a lean, cloud native environment.\n\nDemonstrated experience holding primary or sole responsibility for a company's security, including sensitive access and critical systems, someone the CTO can hand the keys to.\n\nExperience operating at a senior or lead level, with enough judgment to set security and infrastructure direction as a founding hire.\n\nDeep, hands-on cloud security experience, ideally Google Cloud Platform (IAM, networking, logging and monitoring, Security Command Center). Strong AWS or Azure depth with a willingness to go deep on GCP also works.\n\nStrong security fundamentals across IAM, least privilege, secrets and key management, network security, incident response, and vulnerability management.\n\nDetection engineering instincts, able to turn logs into signal and signal into actionable alerts.\n\nStrong experience with Cloudflare, including WAF, DNS, rate limiting, edge security, and Pages.\n\nExperience with Node.js / TypeScript application environments.\n\nExperience working with MySQL in production.\n\nStrong infrastructure-as-code and CI/CD experience.\n\nDemonstrated incident response experience in production environments.\n\nSOC 2 experience, ideally maintaining and maturing an existing certification rather than building one from scratch, comfortable with disaster recovery exercises, ongoing vulnerability management, and policy upkeep.\n\nMust be authorized to work in the United States and currently based in the United States.\n\nPreferred Qualifications\nExperience in fintech, payments, payroll, or another regulated environment that handles funds or sensitive financial data.\n\nISO 27001 or PCI DSS experience.\n\nSecurity certifications such as CISSP, OSCP, or GCP Professional Cloud Security Engineer.\n\nCuriosity about digital-asset payments, we settle in both fiat and stablecoins, so there's plenty to learn, but no prior blockchain experience is required.\n\nExperience building a security or infrastructure function from the ground up.\n\nExperience designing and operating disaster recovery programs for financial or high-availability systems.\n\nCompensation & Logistics\nBase Salary: $170,000-$210,000 USD per year\n\nEquity: Meaningful equity participation\n\nTime Off: Unlimited PTO\n\nSchedule: Flexible work schedule focused on outcomes\n\nBenefits: 401(k) with a 3% company contribution\n\nWork Model: Fully remote\n\nLocation: United States\n\nEmployment: Full-time\n\nCompany Overview\nOur client is a global payments and payroll platform built for modern, distributed teams. The platform enables businesses to pay employees, contractors, and freelancers across borders using both traditional banking rails and digital assets.\nThe platform manages the infrastructure behind cross-border payments, including invoicing, KYC/KYB, onboarding, compliance, tax, identity, and reporting.\nThe technology operates at the intersection of traditional finance and Ethereum-based settlement. The stack includes Google Cloud Platform, Cloud Run, BigQuery, MySQL, Node.js, TypeScript, and Cloudflare, alongside a large smart-contract ecosystem deployed across EVM-compatible networks.\nThe team is lean, remote-first, and high ownership. Security, correctness, accountability, direct communication, and strong documentation are especially important because the platform handles real money and sensitive customer information.","description_format":"text","description_chars":7908,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible schedule","Unlimited PTO"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cryptocurrencies"],"lifecycle":[{"event":"open","at":"2026-09-11T03:14:25Z"}],"visa":[],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":1,"p_active":0.439,"p_room":0.36,"age_days":76,"expected_fill_days":45,"reasons":["conf:3","agency","velocity","win:tail","crowd:"],"computed_at":"2026-10-30T05:48:23Z"},"pay":{"stated_usd_annual":210000,"is_top_pay":true},"html_url":"https://alion.io/job/latamcent-lead-security-and-infrastructure-engineer","json_url":"https://alion.io/job/latamcent-lead-security-and-infrastructure-engineer.json","meta":{"generated_at":"2026-10-30T09:40:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13930,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":678591},"rest":"https://alion.io/mcp/rest/get_company?id=678591"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flatamcent-lead-security-and-infrastructure-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flatamcent-lead-security-and-infrastructure-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flatamcent-lead-security-and-infrastructure-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/latamcent-lead-security-and-infrastructure-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flatamcent-lead-security-and-infrastructure-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":702918}},{"tool":"search_jobs","arguments":{"company":"latamcent.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":702918},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}