Senior Security Engineer

The role

You will define and build the security function with broad ownership across application security, cloud infrastructure, and internal controls. You will design security guardrails, automate controls, and lead compliance efforts like SOC 2.

What you will do

• Design and implement security guardrails across cloud infrastructure and developer workflows
• Improve IAM, secrets management, endpoint management, and access controls
• Harden AWS infrastructure using Terraform and policy-as-code
• Increase observability for security-relevant events and anomalies
• Write code, configs, and tooling to enforce controls
• Replace manual reviews with automation
• Own penetration tests and the bug bounty program end-to-end
• Triage findings and partner with engineers on fixes
• Take Nelo through SOC 2 Type 1 and Type 2
• Review designs and PRs with a security-first lens

Required qualifications

• Engineering background with substantial time spent on security in production environments
• Strong hands-on experience with cloud security fundamentals, ideally on AWS
• Comfortable building and modifying infrastructure with Terraform or equivalent IaC tooling
• You ship code and own outcomes, not just recommendations

Nice to have

• You have taken a company through SOC 2, ISO 27001, or a comparable certification
• You have personally run a bug bounty program or managed external pentests
• Depth in AWS security primitives such as GuardDuty, CloudTrail, IAM, VPC, KMS, and security groups
• You use Claude Code or other agentic coding tools as part of your daily workflow

Benefits

• Competitive salary
• Meaningful equity
• 100% medical, dental, and vision coverage
• Unlimited PTO
• Extended parental leave
• 401k
• STD
• LTD
• fertility

Before you apply

• Conversation with the hiring manager
• Case study
• On-site panel

About the company

Nelo is a leading fintech in Mexico reimagining credit to expand consumer buying power. The company is profitable and runs lean with 60 employees.