Product Security Engineer

Product Security Engineer (Contract)

Location: Remote (LATAM)

We're looking for a Product Security Engineer to help scale and strengthen security reviews across a growing portfolio of SaaS applications, integrations, APIs, AI solutions, and third-party products. This is a hands-on security role for someone who has built, configured, and secured systems themselves, not just audited them. You'll work closely with engineering, infrastructure, and product teams to assess risk, review architectures, recommend controls, and embed security best practices throughout the product lifecycle. The ideal candidate combines application security expertise, strong technical depth, and practical knowledge of modern SaaS environments.

Responsibilities

• Conduct security reviews across SaaS applications, APIs, integrations, AI tools, connectors, and distributed systems.
• Assess applications against security and compliance frameworks including SOC 2, PCI DSS, and GDPR.
• Identify security gaps and provide practical remediation recommendations aligned with OWASP best practices.
• Review authentication, authorization, and identity management controls, including MFA, SSO, SCIM, OAuth2, SAML, and OIDC.
• Perform threat modelling exercises using methodologies such as STRIDE.
• Evaluate product architectures, workflows, integrations, and data flows to ensure secure design principles are being followed.
• Review third-party vendors and BPO security postures, documenting risks and defining required security controls.
• Partner with engineering teams to discuss implementations and validate security configurations.
• Support secure software development lifecycle (SDLC) practices, including secure coding, CI/CD security considerations, and application security improvements.
• Investigate risks associated with new products, file-sharing capabilities, AI-enabled features, and external integrations.
• Contribute to continuous improvement of product security processes and review methodologies.

Required Skills

• Experience conducting application, product, or security reviews across modern SaaS environments.
• Strong application security foundation and knowledge of common attack vectors and remediation strategies.
• Familiarity with the OWASP Top 10 and secure design principles.
• Ability to review architecture diagrams, integrations, APIs, and authentication flows.
• Comfortable reviewing code and understanding software development practices.
• Ability to read Python and work with scripting when required.
• Familiarity with cloud-native technologies and modern infrastructure concepts, including: AWS, Kubernetes, Terraform, CI/CD pipelines, Identity and access management
• Security & Compliance practical understanding of: SOC 2, PCI DSS, GDPR
• Experience identifying required controls around data protection, retention, deletion, access management, and third-party risk.
• Ability to translate compliance requirements into actionable technical controls.

Preferred Skills

• Worked in Product Security, Application Security, Security Engineering, or similar roles.
• Experience at high-growth SaaS companies, major technology firms, or large-scale enterprise environments.
• Previous experience with organizations such as Amazon, Meta, Google, Microsoft, Salesforce, or similarly complex engineering environments.
• Hands-on experience administering or securing platforms such as Salesforce, Google Workspace, Zendesk, or comparable SaaS products.
• A builder mindset with a history of configuring, implementing, or securing systems rather than purely performing audits or compliance assessments.