Senior Security Engineer

Senior Security Engineer

Azumo builds and operates production AI systems for companies ranging from seed-stage startups to Meta. We are hiring a Senior Security Engineer to own the technical security posture of those systems once they are live: the infrastructure they run on the pipelines that feed them and the agents that act on their output. The role is fully remote across Latin America aligned to your clients working day.

This is not an audit seat. Azumo has shipped production AI since 2016 and the work here is in the systems themselves hardening infrastructure closing vulnerabilities and building the guardrails that keep AI-driven workflows safe in front of real users.

Where this role sits

At Azumo ownership is split by what gets built: the pipelines the method behind a decision the product and what an AI system does once its live. Security doesnt work that way. It has to be right across all of them and thats what this role owns.

Gap or breach its yours. If theres a gap you find it and close it before anyone outside the team does. If theres a breach you run it: containment root cause and the fix that keeps it from happening twice.

Whoever builds the system answers for whether it works. You answer for whether its safe to run. That split is agreed before the work starts not reported after.

What you will build

• Platform and infrastructure hardening: Cloud infrastructure APIs internal tooling and CI/CD pipelines: encryption secrets management logging and access controls that are built in not bolted on and stay correct as the systems around them change.
• Vulnerability management and offensive security: Scanning penetration testing adversarial testing threat modeling and manual review across everything Azumo ships into a clients environment with remediation you drive to closed not to ticket.
• AI and agent security: Prompt-injection defense adversarial-input testing and guardrails for the tool-calling and agentic systems the AI Engineer lane builds. Untrusted input arrives from IVR and voice channels web systems APIs and people and what handles it stays bounded observable and safe to fail.
• Watching what the agents do: Monitoring AI systems in production for anomalies abuse attempts and unsafe decisions the same production behavior the AI Engineer lane measures for accuracy watched here for misuse.
• The standing audit: Azumo runs an automated security cost and architecture audit across every client codebase graded by severity down to the file and line on day one and every day after. You own it what it checks how its graded how often its wrong.
• Monitoring detection and incident response: Alerting and detection for what you harden investigation when something looks wrong and root cause when it turns out to be something. You lead the response itself: containment the remediation plan and the preventative change that follows with operational visibility into access patterns and security events maintained rather than reconstructed after the fact.
• Customer and partner security engagement: Security questionnaires vendor risk assessments and enterprise RFPs plus the technical questions that come directly from a clients bank auditor or enterprise prospect. You explain the architecture the controls and what is monitored and you defend the answer without a translation layer in between.
• Secure development practices: Working with the engineering teams on how they build not only on what they ship: architecture reviews secure patterns and the trade-off between security reliability and delivery speed argued in the room with Product Compliance and Operations rather than raised afterwards.
• Work inside the clients environment: Their repositories their tooling sometimes their compliance review. Azumo is SOC 2 certified client code stays in client repositories and some engagements carry additional requirements such as HIPAA.

How we work

Our engineers build with AI every day. Claude Code Codex and similar tools are part of the standard toolchain here not an experiment. The audit youll own runs across the whole codebase on day one and every day after grading security cost and architecture findings by severity with the exact file and line so a small team can move quickly without quality drifting. We stay vendor-neutral across OpenAI Anthropic and open-weight models and we run Valkyrie our own production layer when a single interface to any model is the right call.

About Azumo

Azumo is a San Francisco based software development company that has been building intelligent applications since 2016. We provide nearshore AI engineering teams to organizations that need production AI faster than they can hire for it: as an embedded engineering team as AI staff augmentation alongside an existing team or as a full project build.

Our engineers work from Latin America aligned to United States time zones and have delivered for Twitter Meta Discovery Channel Omnicom UnitedHealth and CENTEGIX.

We hire for seniority and test for it before anyone joins a client team. We support engineers in going deep on the modern AI stack and we give time back to open-source work community teaching and philanthropy.

Apply at or write to us at .

Basic qualifications

• 5 years of hands-on experience in security engineering infrastructure security application security DevSecOps or offensive security with the engineering fundamentals to match: testing code review CI/CD Git containers and API design.
• Deep current knowledge of the AWS ecosystem and the judgment to secure it under production pressure not just in a lab.
• Demonstrated experience identifying and remediating vulnerabilities in live production systems.
• Experience securing AI or LLM-powered systems or automated agents: prompt injection adversarial inputs unauthorized actions unsafe outputs and data leakage. This is the requirement we screen hardest on.
• Working knowledge of compliance frameworks as operating practice rather than documentation: SOC 2 PCI DSS and the expectations that come with handling financial and consumer data kept continuously rather than assembled for an audit.
• Self-directed prioritization. You decide what gets fixed first in a fast-moving environment and you can explain why.
• Active use of AI-assisted coding tools such as Claude Code Cursor or GitHub Copilot in real delivery work.
• Strong communication skills: the ability to explain a finding to engineers and defend it to a client directly without a translation layer in between.
• Clear written and spoken English C1 or above.
• Bachelors degree in Computer Science Information Security or a related field or equivalent professional experience.

Preferred qualifications

• Familiarity with prompt-injection attacks adversarial AI techniques AI guardrails and behavioral anomaly detection.
• Cloud security tooling SIEM and observability platforms penetration testing tools endpoint security platforms and infrastructure-as-code security (Terraform Bicep or similar).
• Prior experience in high-growth startup fintech banking or payments environments.
• Certifications such as CISSP CISM AWS Security Specialty or similar.
• Contributions to open-source security tooling published technical writing or active participation in the security community.

100% remote-firste culture (work anywhere in Latin America)

Paid time off (PTO)

U.S Holidays

Solid AI Training and certification

Mentored career development

Profit Sharing

$US remuneration

Maternity coverage

Required Experience:

Senior IC