Назад
Company hidden
7 часов назад

Security Lead

80 000 - 100 000$
Формат работы
remote (только Brazil/Mexico/Colombia)
Тип работы
fulltime
Грейд
lead
Английский
b2
Страна
Mexico/Colombia/Brazil
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Security Lead (AppSec/AWS/AI): Building and leading LawnStarter's security function across its PHP/Laravel and TypeScript/React platform, AWS infrastructure, payment flows, customer data, and compliance posture with an accent on application security, cloud security, and AI-agent-authored code. Focus on threat modeling, automated security controls, PCI/SOC 2/LGPD readiness, detection and response, and building the foundation for a future security team.

Location: Remote; listed locations include Brazil, Mexico, and Colombia

Salary: $80,000–$100,000 USD annually

Company

hirify.global operates an on-demand marketplace for lawn care and outdoor services and is expanding into a broader home-services platform across three brands.

What you will do

  • Lead security across the PHP/Laravel and TypeScript/React application, AWS infrastructure, payment systems, customer data, and compliance program.
  • Build application-security practices including threat modeling, secure SDLC, code and design reviews, SAST, secret scanning, dependency scanning, and vulnerability management.
  • Strengthen AWS and Kubernetes security, including IAM, network controls, encryption, secrets management, and EKS hardening.
  • Map PCI scope, drive SOC 2 and LGPD readiness, manage vendor risk, and support customer and auditor security questionnaires.
  • Improve detection and response using Datadog, Sentry, and AWS signals; establish and rehearse incident runbooks and baseline MTTD/MTTR.
  • Define security controls for AI-agent-authored code and create the standards, playbooks, roadmap, and hiring plan for a future security team.

Requirements

  • Hands-on expertise across at least three of application security, cloud security, compliance, and incident response.
  • Experience building and operating technical security controls rather than focusing only on policy or audits.
  • Ability to work across application security, AWS, compliance, data protection, detection, and response.
  • Pragmatic risk prioritization skills, with a focus on reducing material risk while maintaining delivery speed.
  • Daily use of AI tools for security work and comfort securing AI-agent-authored code.
  • Strong collaboration with delivery teams and Cloud & DevOps, with the ability to grow into leading a small security team within approximately 12–18 months.

Culture & Benefits

  • Fully remote role with a US-distributed engineering team.
  • Asynchronous work and autonomy over the working environment.
  • Opportunity to define the security function and shape its future team.
  • Claude Code and the engineering team's AI agent stack are provided for security work.
  • Top-of-market cash compensation for the lead scope and technical leadership expected.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →