Security Engineer

We are looking for a Security Engineer to strengthen the security of our internally developed software products and infrastructure.This role combines hands-on security testing, vulnerability research, and collaboration with Engineering teams. You will help identify risks, improve security practices, and guide developers toward practical, business-aligned solutions.What you'll doConduct vulnerability assessments and penetration testing.Plan and execute red team, adversary simulation, and threat emulation activities.Collaborate with developers to integrate security into the software development lifecycle.Investigate security incidents and provide actionable recommendations.Support threat modeling and risk assessments.Improve container security practices and security testing automation.Deliver clear vulnerability reports and remediation guidance.Promote security awareness and best practices across engineering teams.What we're looking for3–5 years of experience in web development or software engineering.Understanding of OWASP Top 10 and web application security.Experience with Burp Suite, OWASP ZAP, or similar security testing tools.Strong understanding of HTTP, REST APIs, authentication, databases, and sessions.Ability to read, understand, and debug source code.Scripting or automation skills with Python, Bash, PowerShell, JavaScript, or similar.Strong analytical and troubleshooting skills.English: B2+Nice to haveExperience with tools such as ffuf and Burp extensions.CTF, bug bounty, or personal security lab experience.Knowledge of Docker, APIs, or modern web frameworks.Security certifications or training such as eJPT or Security+.What makes this role differentYou'll have the opportunity to move beyond simply identifying vulnerabilities and become a security partner for Engineering, helping build more secure products while balancing security with business and operational priorities.📍 Based in Bolivia