Security Engineer (Early Career) (Ingeniero/a de Seguridad - Carrera Temprana) - Mexico City (Hybrid)

Ready to accelerate your career?

Clara is the fastest-growing company in Latin America. We've built the leading solution for companies to make and manage all their payments. We already help over 20,000 large and growing businesses operate with agility and financial clarity through locally issued corporate cards, bill pay, financing, and a powerful B2B platform built for scale.

Clara is backed by some of the most successful investors in the world, including top regional VCs like monashees, Kaszek, and Canary, and leading global funds like Notable Capital, Coatue, DST Global Partners, ICONIQ Growth, General Catalyst, Citi Ventures, SV Angel, Citius, Endeavor Catalyst, and Goldman Sachs - in addition to dozens of angel investors and local family offices.

We’re building the financial infrastructure that powers high-performing organizations across the region. We invite you to join us if you want to be part of a fast-paced environment that will accelerate your career and support you to do some of the best work of your life alongside a passionate and committed team distributed across the Americas.

Security Engineer (Early Career)

You will rotate across the security function in your first year, with real ownership from the first month. Expect the mix below to shift as the business does.

Secure the AI posture, without blocking it

• Review how teams use LLMs, coding agents and AI tooling (Claude, agentic browsers, internal inference gateways) and help define guardrails that protect data without killing adoption

• Operate our LLM-based investigation agent on the SIEM: catch hallucinated attributions, noisy alerts and conclusions the underlying data doesn't support, and tune its instructions before they reach production

• Develop the core skill of this role: knowing when to trust an AI-generated result and when to verify it by hand

• Help build our view of prompt injection, data exfiltration through AI tools, and model/agent permissions as first-class risks

Cloud security on AWS and GCP

• Triage findings from AWS GuardDuty, GCP Security Command Center, IAM and network configuration reviews

• Run configuration and posture checks, and drive fixes with the owning teams instead of just filing tickets

• Contribute to our large-scale GCP project inventory and cleanup, and keep the central findings tracker honest

• Learn Auth0, Cloudflare and Google Workspace security controls as they apply to identity, edge and SaaS

Secure code and CI/CD

• Review internal tools, scripts and pull requests for the classics: hardcoded credentials, unsafe input handling, over-broad permissions, secrets in pipelines

• Own SonarQube and dependency-scanning results for internal repositories: prioritize CVEs, follow up with developers, close the loop

• Review CI/CD changes that touch security-sensitive configuration (secrets, deployment access, IAM bindings)

• Help push secure-by-default patterns into how engineers actually work, including the code they generate with AI

Detection, response and triage

• Write and refine Splunk queries to investigate alerts from identity/SSO, cloud, endpoint, email and network sources

• Maintain detection rules and dashboards; hunt down false positives and false negatives

• Reconstruct user activity timelines across systems and document findings with evidence, not just conclusions

• Monitor the EDR console, investigate suspicious endpoints, and execute containment (host isolation, quarantine) with a senior engineer

• Triage phishing reports, analyze URLs and