Join a growth-stage company as a Cloud Security Engineer, working on securing cloud infrastructure and compliance controls.
Posted by employer 10 hours ago
First seen on Joblaze 1 hour ago
Last verified on the company career page 1 hour ago
Skills & Technologies
What you'll build
Must have
AI in the day-to-day
You use AI tools in your daily work to move faster.
Requirements
Not disclosed in this posting: compensation, visa sponsorship.
Benefits
Joblaze summary
In this role, the Cloud Security Engineer collaborates closely with the CTO to develop and implement a comprehensive security and compliance strategy. The position requires strong programming skills in languages like Python or Go, along with extensive experience in AWS and infrastructure as code tools such as Terraform. Ideal candidates have a background in software development and security, with at least four years of experience, including two in a relevant security role. The team operates in a fast-paced environment, emphasizing autonomy and proactive problem-solving.
Joblaze insights
Quick facts
From the original posting
We’re changing that.
• Work side by side with our CTO to own our security and compliance roadmap, from strategy to execution.
• Lead our offensive security track with external partners: scope pentests, triage findings and drive the fixes across infrastructure and code.
• Partner with our Infra & Platform team to design, harden and scale the backend and cloud infrastructure behind our products.
• Securing our cloud infrastructure (e.g., AWS, Supabase, Cloudflare): IAM, networking, encryption, secrets and logging.
• Authentication, authorization and data protection across our apps.
• Building security into our CI/CD: code, dependency and secret scanning that keeps pace with a team that deploys every day.
• Writing the code, automations and tooling that fix vulnerabilities and keep them from coming back.
• Owning our compliance controls (HIPAA, GDPR, SOC 2) and closing the technical gaps.
• Monitoring, alerting and incident response for a real-time telephony and AI product.
Engineering background:
◦ You started as a software developer and still write production code in languages like Python, Go, TypeScript, Kotlin, Java or similar.
◦ You build tools and automations, not just configure them.
◦ You use AI tools in your daily work to move faster.
2. Cloud & Infrastructure:
◦ Deep hands-on experience with AWS: IAM, VPC and networking, KMS, CloudTrail, GuardDuty or similar.
◦ Infrastructure as Code with Terraform, CDK, Pulumi or similar.
◦ Solid networking fundamentals: DNS, TLS, firewalls, WAF, VPNs.
3. Security:
◦ You have found and fixed real vulnerabilities, from a pentest, an audit or your own monitoring.
◦ Experience with secure CI/CD, secrets management and least-privilege access.
◦ Experience with compliance frameworks (SOC 2, HIPAA, ISO 27001, GDPR) is a plus, not a requirement.
4. How you think
◦ You care about why we build things, not just how.
◦ You ask smart questions, challenge ideas when needed, and help shape what’s next.
◦ You think in terms of user value and business impact.
5. How you work
◦ You communicate clearly, give feedback with no ego, and help others grow.
◦ You move fast, take ownership, and thrive in ambiguity.
◦ You're comfortable working in English — and in a small team with big goals.
You’ve worked in product companies
4+ years of experience, including at least 2 as a software developer, before or alongside DevOps, SRE or security work.
You’re proactive, autonomous, and know how to fill the gaps
You can communicate in English, since that's our official language. Most of the team also speaks Spanish and French.
Competitive salary (in USD or local equivalent)
Equity package
10-day team retreats abroad every year
Trips to our Hubs (Pairs/Miami/BA) for onboarding and more
Laptop and work setup of your choice
Coverage for private health insurance (for US or LATAM hires)
A tight, ambitious team building something real: fast
We welcome people from all backgrounds.
Standard company text repeated across The Mobile-First Company's postings is omitted here.