Senior Security Engineer

Join Valon, a fast-growing company, as a Senior Security Engineer. In this role, you will be responsible for ensuring the security of our systems, cloud infrastructure, products, and data. You will define and evolve product security architecture, support secure implementation of customer-facing security capabilities, lead threat modeling and security design reviews, and collaborate with various teams to identify and mitigate security risks. This is a hands-on position that requires a strong background in cloud security, product security, and application security.

• Definir y evolucionar la arquitectura de seguridad del producto para la plataforma SaaS multi-tenant de Valon, y liderar la modelización de amenazas, el diseño de seguridad y las revisiones de código.
• Colaborar con equipos de Producto, Ingeniería, Datos, Cumplimiento, Legal y otros para identificar y mitigar riesgos de seguridad del producto y de datos.
• Desarrollar, implementar y hacer cumplir políticas, estándares y procedimientos de seguridad, y apoyar las actividades operativas, incluyendo la respuesta a incidentes y la remediación de problemas de seguridad.
• Applied knowledge with industry security and compliance frameworks (OWASP, NIST, CIS, SOC 2/ISO 27001 concepts)
• Strong background in cloud security and modern infrastructure, with hands-on experience securing cloud environments (GCP preferred)
• Experience in SaaS IAM and tenant security (e.g., authentication/authorization, RBAC, SSO/SAML/OIDC, SCIM, MFA, audit logs)
• Focused experience in product security, application security, or security architecture roles, with ownership of security design for SaaS platforms including multi-tenancy and customer-facing security capabilities
• Strong experience leading threat modeling and security design reviews including security-focused code reviews
• Demonstrated ability to build and maintain security reference architectures
• Highly hands-on engineer with proven ability to operate autonomously, drive multiple complex cross-functional efforts, and influence independently
• Expertise in designing secure platform controls (e.g., APIs, service-to-service auth, encryption/KMS/CMEK, logging/monitoring)
• Experience working in high-growth or startup environments is a plus
• Prior software engineering experience and/or coding ability (Python) is preferred
• Excellent communication and collaboration skills, including the ability to explain complex security concepts to both technical and non-technical stakeholders
• Proven ability to design security reference architectures and implement customer platform security controls and technologies (IAM, API security, encryption/key management, logging/monitoring and others)
• Bachelor's degree in Information Security, Computer Science, Technology or related field
• Hands-on experience with modern security technologies and tooling across cloud and application security
• 5+ years in security engineering roles focused on product, application, and/or cloud security
• Relevant security certifications (e.g., CISSP, CISM, CCSK, CCSP or similar)