DevSecOps Engineer- Latin America- Remote
Azumo is looking for a highly technical and hands-on DevSecOps Engineer / Security Solutions Lead to own and strengthen the security posture of our platform, infrastructure, and AI-driven systems.
This is a proactive, operationally-focused role—not just policy work. You will actively secure systems, remediate vulnerabilities, and collaborate across engineering and compliance to ensure continuous resilience. Working in a remote-first, high-trust engineering culture, you will join us as we scale rapidly following our Series A funding to power the future of modern financial infrastructure.
Location: Remote Latin America
In this role, you will secure and improve the systems that power our FinTech ecosystem while also serving as a key representative of our security program during customer and partner due diligence processes.
Key Responsibilities
Security Engineering & System Hardening
● Secure and harden cloud infrastructure, applications, APIs, internal systems, and operational workflows. · Implement and maintain security controls across production environments, CI/CD pipelines, cloud infrastructure, and internal tooling.
● Work directly with engineering teams to remediate vulnerabilities and improve secure development practices.
● Ensure encryption, secrets management, logging, monitoring, and access controls are properly implemented and continuously maintained.
● Design and improve security architecture across cloud-native and distributed systems. · Build scalable security processes that integrate directly into engineering and operational workflows.
Vulnerability Management & Offensive Security
● Continuously identify, assess, prioritize, and remediate security vulnerabilities across infrastructure, applications, APIs, and operational systems.
● Proactively search for weaknesses through vulnerability scanning, penetration testing, adversarial testing, threat modeling, manual security reviews
● Coordinate remediation efforts across engineering and operations teams. · Validate fixes and ensure long-term mitigation strategies are implemented.
● Improve detection and prevention capabilities for emerging threats.
● Help establish a culture of continuous security improvement and operational accountability.
AI Security & Emerging Threat Protection
● Secure AI-driven systems and automated agents against emerging threats including prompt injection, adversarial inputs, unauthorized or unintended actions, unsafe outputs, data leakage and exposure risks.
● Design and implement guardrails and validation layers for AI-generated actions.
● Ensure AI systems safely handle untrusted inputs from IVRs, web systems, APIs, and human interactions.
● Monitor AI system behavior for anomalies, abuse attempts, or unsafe decision-making.
● Partner with engineering teams to ensure AI systems are observable, auditable, bounded, and fail safely.
● Help define operational and technical controls for responsible AI deployment.
Monitoring, Detection & Incident Response
● Improve and maintain security monitoring, alerting, logging, and incident response capabilities.
● Investigate suspicious activity, anomalies, and potential security incidents.
● Lead or support incident response efforts, root cause analysis, and remediation planning.
● Ensure operational visibility into system health, access patterns, and security events.
● Recommend and implement preventative measures following incidents or security discoveries.
Compliance, Audit & Risk Management
● Collaborate closely with Compliance and Operations teams to ensure security controls meet SOC 2 requirements, PCI DSS requirements, Financial and consumer data security regulations.
● Assist with audit preparation, evidence collection, security documentation, and control validation.
● Help operationalize security controls so compliance is continuously maintained—not just audit-driven.
● Participate in risk assessments, control reviews, and remediation p