Clara is the leading spend management platform for companies in Latin America. Our end-to-end solution includes locally-issued corporate cards, bill pay, and our highly-rated software platform; already being used by thousands of the most successful companies across the region.
Clara is backed by top investors and strategics including Accial Capital, Canary, Citi Ventures, Coatue, DST Global, General Catalyst, Goldman Sachs, ICONIQ Growth, Kaszek, Monashees, and Notable Capital, as well as prominent angel investors.
Disclaimer: This role is open to all candidates across LATAM, not just posting location.
Job Summary
We are looking for a highly skilled Security engineer, responsible for proactively securing our infrastructure and defending against cyber threats. This role requires a security expert who is always one step ahead of attackers—someone who can prevent, detect, mitigate, and neutralize threats in real time.
As the lead security engineer, you will actively monitor incoming attacks, develop mitigation strategies, build security plans for potential threats, and conduct continuous offensive security testing on our infrastructure. You will also run an in-house Security Operations Center (SOC), ensure compliance with security audits and certifications, and perform continuous scanning and vulnerability assessment on our systems.
Key Responsibilities
- Continuously monitor systems for active threats, unauthorized access, and potential vulnerabilities.
- Actively respond to and mitigate security incidents in real-time.
- Develop and refine playbooks for various attack scenarios and their mitigation.
- Perform continuous penetration testing and active scanning of internal infrastructure, networks, and services.
- Identify security weaknesses before attackers do and recommend security hardening strategies.
- Run an in-house SOC focused on active defense, logging, and real-time monitoring.
- Leverage threat intelligence feeds and develop in-house intelligence to stay ahead of attack trends.
- Develop tools and techniques for anomaly detection and automated incident response.
- Design, implement, and maintain zero-trust security models across cloud and on-prem infrastructure.
- Work closely with DevOps and infrastructure teams to ensure secure CI/CD pipelines and secure cloud deployments.
- Maintain compliance documentation, conduct internal security audits, and ensure security measures align with business objectives.
- Work with legal and compliance teams to ensure adherence to privacy laws.
- Run internal red team exercises and simulate real-world cyberattacks against the company’s infrastructure.
Requirements & Qualifications
- 5+ years of experience in cybersecurity, infrastructure security, or offensive security (red teaming, pentesting, or SOC leadership).
- Experience with offensive security tools.
- Proficiency in SIEM tools (Splunk, ELK Stack, Wazuh, etc.) and log analysis.
- Strong understanding of cloud security (AWS) and container security (Kubernetes, Openshift).
- Knowledge of compliance frameworks (ISO 27001, PCI-DSS, NIST, GDPR, etc.).
- Scripting and automation skills.
- Experience with forensic analysis and threat hunting methodologies.
Nice-to-Have
- OSCP, CISSP, CEH, or similar security certifications.
- Knowledge of reverse engineering and malware analysis.
- Experience working in the banking or fintech industries
- Experience in secure software development lifecycle (SSDLC).
The way we do things is as important as what we do. That is why we operate on a set of carefully-identified values. They are what we expect from ourselves and each other in our day-to-day.
We value
* Clarity - Open and direct communication
* Simplicity - Pare things down to the essential
* Ownership - We're all owners and act like it
* Pride - Make quality products we're proud of
* Always Be Changing (ABC) - Continuous self-improvement
* Inclusivity - Every voice counts; we value each other for our shared mission and contributions
We are
* Shaping business finances in Latin America
* Driven by our 6 core values
* Proud of our inclusive and caring culture
* Certified as Top LinkedIn Startup
What We offer
* Competitive salary & a robust stock ownership plan
* 100% flexible work model
* A set of benefits that are adaptable to your needs & way of life
* Opportunities for growth in a fast-paced environment
* A chance to shape B2B payments in Latin America and increase the region’s economic competitiveness
Top Skills
What We Do
Clara is the leading payment platform for companies in Latin America. Our end-to-end solution includes our locally-issued corporate cards, Bill Pay, crossborder payments, and our highly-rated software platform used by thousands of the most successful companies across the region. Clara is backed by top global and regional investors such as Coatue, DST Global, General Catalyst, monashees, Kaszek, Canary, A*, BoxGroup, SV Angel, GFC, Picus Capital, Avid Ventures, ICONIQ Growth, Goldman Sachs, and prominent angel investors. Driven by our six core values (Ownership, Pride, ABC, Simplicity, Clarity and Inclusivity) we’ve reached a unicorn valuation in record time, have been recognized as a Great Place to Work and as one of the most promising startups according to Linkedin’s ranking “Top Startups 2021”. We’re looking for the best talent worldwide to join our team and be part of this journey, so you can't afford to miss this chance! We are: * Shaping business finances in Latin America * Driven by our 6 core values * Proud of our inclusive and caring culture * Certified as a Great Place to Work and a Top LinkedIn Startup
