Sr. Security Engineer - Mexico / LATAM

Yalo

Hi! This is Yalo! We are on a mission to bring conversational commerce to the world...

Remember how it used to be to interact with businesses that knew and understood you, that could recommend exactly what you needed, and that with a simple message could get you what you wanted??? Yep... neither do we. That is why at Yalo we are marrying the scale of digital commerce with the personalization and simplicity of conversations to help companies delight their users.

We know that traditional SAAS companies focus on first world problems... we don't! Having started in Latin America, our roots are in Emerging Markets and therefore we care about bringing amazing experiences to a population that traditionally has been underserved, such as the small shop owner in Brazil that is ordering online for the first time.

If you're looking for a place to make things happen, learn fast, and impact emerging markets in a way that hasn't been done before, look no further. 💫

Come Join us in our mission of improving billions of lives through the power of conversational commerce!

Your mission 🚀

As a Senior Security Engineer, you will help plan and execute Yalo's information security strategy, supporting business applications and technology to ensure their secure deployment and launch.

You will align security best practices from the industry with technology solutions and business strategy to help Yalo achieve top security framework certifications. Additionally, you will foster a culture of continuous improvement, raising awareness and understanding of important security practices and considerations throughout the company.

What are the responsibilities for this role?

• Communicate security requirements, risks, and recommendations clearly and concisely.
• Manage and enhance security programs with a focus on continuous improvement.
• Implement strategies to strengthen security posture.
• Monitor and improve security key performance indicators (KPIs) related to threat intelligence, vulnerabilities management, and risk assessment.
• Create, update, and maintain security processes, procedures, and policies according to industry standards and regulatory requirements.
• Provide recommendations and implement controls to meet compliance requirements for various standards (e.g., SOC2, PCI DSS, ISO 27001, GDPR, NIST, LFPDPPP).
• Support in the process to respond to customers’ security inquiries and assessment.
• Collaborate effectively with cross-functional teams, stakeholders, and external partners/vendors.
• Ensure alignment with DevOps principles while maintaining security standards and compliance requirements

Job Requirements

Must Have:

• 5+ years of experience in Information Security, AppSec, Security Architecture.
• Deep expertise in Cloud, Linux and network security (certifications are a plus)
• Deep understanding of Cloud Security tools
• Deep understanding of Secure Software Development Life Cycle
• Fluent/Advanced proficiency in English, Spanish is a plus.

Nice to have:

• Experience in implementing and maintaining security baselines for infrastructure, applications, and architecture.
• Collaborate effectively with DevOps teams to embed security into every stage of the software development lifecycle (SDLC).
• Successful experience with Security and Privacy compliance certifications.

Soft skills that matter to us:

• Excellent time-management skills
• Team player
• Critical thinker and problem-solving skills
• Sense of ownership and pride in your performance and its impact on company’s success
• Interpersonal and communication skills.

What do we offer? 

• Unlimited PTO policy
• Competitive rewards on the market range
• Remote working is available (-+3 hours CT)
• Flexible time (driven by results)
• Start-up environment
• International teamwork
• You and nothing else limit your career here

We care,

We keep it simple,

We make it happen,

We strive for excellence.