Senior Security Engineer, Platforms & AI

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Engineer, Platforms & AI based in Brazil. This is a senior, hands-on security engineering role focused on protecting production AI systems and the infrastructure that supports them. You will own the technical security posture across cloud infrastructure, APIs, CI/CD pipelines, applications, and AI-powered agents. The role combines platform security, vulnerability management, offensive security, monitoring, and incident response. You will also develop practical defenses against prompt injection, adversarial inputs, unsafe agent behavior, and data leakage. Working remotely with engineering teams and clients across Latin America, you will operate directly inside real production environments. The position offers significant technical ownership, exposure to modern AI tooling, and the opportunity to establish security controls that scale with rapidly evolving systems. Success in this role requires strong engineering fundamentals, sound security judgment, and the ability to communicate directly with both technical teams and clients.

Harden cloud infrastructure, APIs, internal tools, and CI/CD pipelines through effective encryption, secrets management, logging, identity, and access controls. Identify, assess, prioritize, and remediate vulnerabilities across production systems, ensuring issues are driven through to resolution rather than simply documented. Conduct vulnerability scanning, penetration testing, adversarial testing, threat modeling, manual security reviews, and related offensive security activities. Design and implement security controls for AI and agentic systems, including defenses against prompt injection, adversarial inputs, unauthorized actions, unsafe outputs, and data leakage. Own the ongoing automated security, cost, and architecture audit process, including defining checks, severity criteria, accuracy, and monitoring cadence. Establish monitoring and detection capabilities, investigate suspicious activity, lead incident containment and root-cause analysis, and implement preventative fixes. Work directly within client environments, repositories, tooling, and compliance processes while maintaining strong security practices and clear accountability. Collaborate closely with engineers and stakeholders to establish practical security requirements early in the development lifecycle and continuously improve the security posture of production systems. Use modern AI-assisted engineering tools as part of day-to-day security and development workflows. Requirements 7+ years of hands-on experience in security engineering, infrastructure security, application security, DevSecOps, or offensive security. Strong engineering fundamentals, including experience with security testing, code review, CI/CD, Git, containers, and API design. Deep and current knowledge of AWS and the ability to apply cloud security principles effectively in production environments. Demonstrated experience identifying, investigating, and remediating vulnerabilities in live production systems. Hands-on experience securing AI or LLM-powered systems or automated agents, particularly around prompt injection, adversarial inputs, unauthorized actions, unsafe outputs, and data leakage. Active experience using AI-assisted coding and engineering tools such as Claude Code, Cursor, GitHub Copilot, or comparable solutions. Strong understanding of prompt-injection attacks, adversarial AI techniques, AI guardrails, and behavioral anomaly detection is highly valuable. Experience with cloud security tooling, SIEM and observability platforms, penetration testing tools, endpoint security, and infrastructure-as-code security using technologies such as Terraform or Bicep. Experience working under compliance frameworks such as SOC 2 or HIPAA is an advantage. Strong written and verbal communication skills, with the ability to explain technical findings clearly to engineers and communicate directly with clients. Professional English proficiency at approximately B2/C1 level or above. Bachelor’s degree in Computer Science, Information Security, or a related discipline, or equivalent professional experience. Experience in high-growth startups, fintech, banking, payments, or similarly demanding environments is a plus. Relevant certifications such as CISSP, CISM, AWS Security Specialty, or equivalent are advantageous. Contributions to open-source security projects, technical publications, or active involvement in the security community are welcome. Benefits 100% remote-first work environment, with the ability to work from anywhere in Latin America. U.S. dollar-based remuneration. Paid time off (PTO). U.S. public holidays. Maternity coverage. AI training and certification opportunities. Mentored career development. Profit-sharing opportunities. Exposure to modern AI engineering, security technologies, and production-scale systems.

laptop-ats-crawler v3