Security Engineer
Share
Job Location:
Mexico City - Mexico
Monthly Salary:
Not Disclosed
Posted on:
Yesterday
Vacancies:
1 Vacancy
Department:
Job Summary
THIS OPENING IS AVAILABLE FOR CANDIDATES IN LATIN AMERICA NOT LIMITED TO ONLY MEXICO.
Sonatafy Technology headquartered in Scottsdale Arizona is an award-winning nearshore software development company with a strong reputation. They have a dedicated in-house team of engineers offering end-to-end software solutions and supporting client development staff augmentation. Catering to companies of all sizes and industries including some of the worlds largest brands Sonatafy Technology is a trusted provider of nearshore enterprise-level cloud and mobile application software development services.
We are hiring our first Senior Security Engineer to help build and mature our security program across our platform and internal systems.
This is a hands-on security engineering role focused on strengthening application security improving threat detection and implementing key security controls across our cloud environment.
You will work closely with engineering leadership to ensure security is embedded into product development while helping define the companys long-term security architecture.
This role is ideal for someone who enjoys building security practices in a growing engineering organization and having a direct impact on the security posture of a product.
What Youll Do
Application & Platform Security
- Conduct security reviews and threat modeling for new product features
- Partner with engineering teams to embed secure development practices
- Improve vulnerability management and security scanning processes
- Help integrate security tools such as SAST and dependency scanning
Security Operations & Threat Detection
- Manage and tune our Web Application Firewall (WAF)
- Monitor logs and alerts to identify suspicious activity
- Investigate and respond to security incidents
- Improve detection logging and alerting across our platform
Identity & Access Management
- Drive implementation of SSO and centralized identity management
- Design and enforce least-privilege access controls
- Establish RBAC policies and support access review processes
Security Strategy & Program Development
- Help define the companys security roadmap
- Establish measurable security KPIs and reporting
- Evaluate and recommend security tools and controls
- Collaborate with leadership on security and privacy considerations
- Support security best practices across engineering and infrastructure
- Lead MDM implementation (Jamf Kandji Intune or similar)
- Ad-hoc IT Management Support day-to-day security tooling maintenance (i.e. Peripheral provisioning CI/CD pipelines SSO provisioning).
Required Skills
- 5 years of experience in Security Engineering SecOps AppSec or DevSecOps
- Strong experience securing AWS cloud environments
- Experience implementing and managing AWS-native security services (IAM GuardDuty Security Hub CloudTrail CloudWatch Detective Inspector KMS Secrets Manager Certificate Manager)
- Strong knowledge of web application security (OWASP Top 10)
- Experience managing Web Application Firewalls (WAF)
- Experience with security monitoring incident response and threat detection
- Experience conducting application security reviews and threat modeling
- Familiarity with identity and access management (SSO RBAC MFA)
- Ability to integrate security tooling into engineering and CI/CD workflows
Nice to Have Skills
- Experience building or scaling security programs
- Experience in consumer-facing or high-traffic platforms
- Experience supporting SOC 2 ISO 27001 or similar frameworks
- Familiarity with GDPR or privacy-related security requirements
- Experience with scripting or automation (Python Bash Go etc.)
Why Work with Sonatafy
At Sonatafy youll join a community of highly skilled engineers across Latin America supporting innovative U.S.-based teams. Youll be part of a fast-moving client-first culture where your code has real-world impact. We offer competitive compensation a remote-first lifestyle and career growth opportunities across industries and technologies.
If you have reached this point and feel you are our ideal candidate its time for you to apply! To apply please submit your resume in English.
Recruitment Scam Notice:
Sonatafy recruitment communications will only come from @ email addresses. We do not request fees sensitive financial information or conduct hiring solely through online forms without interviews. If you receive a suspicious message contact us at .
Official Job Posting Notice:
All legitimate Sonatafy job openings are published exclusively on our official LinkedIn page and our careers website at If you found this or any other Sonatafy job posting on a third-party platform job board or any other external site please be aware that those listings are not authorized or monitored by us and are very likely a scam. Do not share personal information pay any fees or proceed with any process initiated through unofficial channels. When in doubt visit our official careers page or reach out directly at
Required Experience:
Senior Manager
Key Skills
- Splunk
- IDS
- Network security
- Computer Networking
- Identity & Access Management
- PKI
- PCI
- NIST Standards
- Security System Experience
- Information Security
- Encryption
- Siem
