Cloud Security Engineer 🇦🇷

Mobile-first business software company building products for small businesses. Its first product, Allo, gives businesses a second number on their phone, answers missed calls with AI, transcribes calls and syncs them to a CRM. The company's team is based in Paris, Buenos Aires and Miami. This role is for a Cloud Security Engineer who owns the security and compliance roadmap, leads the offensive security track, and works on cloud infrastructure security.

Responsibilities

Work side by side with the CTO to own the security and compliance roadmap, from strategy to execution; Lead the offensive security track with external partners: scope pentests, triage findings and drive the fixes across infrastructure and code; Partner with the Infra & Platform team to design, harden and scale the backend and cloud infrastructure behind products; Secure cloud infrastructure (e.g., AWS, Supabase, Cloudflare): IAM, networking, encryption, secrets and logging; Authentication, authorization and data protection across apps; Build security into CI/CD: code, dependency and secret scanning; Write the code, automations and tooling that fix vulnerabilities and keep them from coming back; Own compliance controls (HIPAA, GDPR, SOC 2) and close the technical gaps; Monitoring, alerting and incident response for a real-time telephony and AI product

Requirements

Started as a software developer and still writes production code in languages like Python, Go, TypeScript, Kotlin, Java or similar; Builds tools and automations, not just configures them; Uses AI tools in daily work; Deep hands-on experience with AWS: IAM, VPC and networking, KMS, CloudTrail, GuardDuty or similar; Infrastructure as Code with Terraform, CDK, Pulumi or similar; Solid networking fundamentals: DNS, TLS, firewalls, WAF, VPNs; Has found and fixed real vulnerabilities, from a pentest, an audit or own monitoring; Experience with secure CI/CD, secrets management and least-privilege access; Cares about why things are built, not just how; Asks smart questions, challenges ideas and helps shape what's next; Thinks in terms of user value and business impact; Communicates clearly, gives feedback with no ego, and helps others grow; Moves fast, takes ownership, and thrives in ambiguity; Comfortable working in English; 4+ years of experience building and operating backend systems in production, with hands-on responsibility for application or infrastructure security; Considers reliability, observability and recovery alongside security; Prioritizes by real-world risk; Proactive, autonomous, and knows how to fill the gaps; Can communicate in English; Has worked in product companies

Nice to have

Experience with compliance frameworks (SOC 2, HIPAA, ISO 27001, GDPR)

Benefits

Competitive salary (in USD or local equivalent); Equity package; 10-day team retreats abroad every year; Trips to Hubs (Paris/Miami/BA) for onboarding and more; Laptop and work setup of your choice; Coverage for private health insurance (for US or LATAM hires); A tight, ambitious team building something real: fast