[Hiring] Senior Security Engineer & Client Security Lead @OneSeven Tech

Role Description

We are building the security capability behind OneSeven Tech from the ground up. You will secure our internal systems, embed security engineering into the brownfield and greenfield software we deliver for clients, and work with leadership to turn that work into productized cybersecurity services. This is a senior, hands-on individual-contributor role that also owns internal IT directly: there is no external IT provider.

Qualifications

• Hands-on production application and cloud security experience: web/API vulnerabilities, authorization, identity, secure development, and remediation
• Experience running authorized penetration testing and implementing defensive controls, monitoring (EDR/SIEM), and incident-response workflows
• Practical internal IT administration: SSO/MFA, employee access, endpoints, business SaaS, and user support
• Ability to evaluate and use AI-assisted security tools and agents with proper authorization, containment, output verification, and audit trails
• Automation skills through scripting, APIs, or infrastructure-as-code
• Strong client-facing writing and presentation skills in English, including staying composed during incidents
• Ability to turn technical work into repeatable processes, clearly scoped services, and measurable outcomes

Requirements

• Consulting, multi-client delivery, managed security services, or cybersecurity service development
• AI/LLM security, adversary emulation, purple teaming, detection engineering, and SOAR
• Brownfield modernization and greenfield product development experience
• Familiarity with OWASP ASVS, MITRE ATT&CK, and NIST CSF
• Relevant practical certifications; demonstrated engineering ability and client judgment matter more than a credential checklist

What You Will Do

• Perform threat modeling, secure-design reviews, and architecture assessments; integrate SAST, SCA, secret scanning, IaC checks, and DAST into development workflows
• Plan and run authorized penetration tests, attack-surface assessments, and scoped red teaming, including AI-assisted testing under clear rules of engagement
• Assess AI-enabled applications and agents for prompt injection, data exposure, excessive permissions, and cross-client data access
• Implement and tune EDR/XDR, SIEM, detections, and SOAR playbooks; run threat hunting and purple-team exercises
• Lead incident triage, containment, and recovery, and keep clients updated with clear, timely communication
• Own internal IT: onboarding/offboarding, SSO/MFA, access reviews, device management, and SaaS administration
• Act as a primary security contact for clients: discovery calls, scoping, assessment readouts, remediation workshops, and executive reports
• Work with leadership to build repeatable security services: playbooks, templates, scoping, effort estimates, and pricing inputs

Benefits

• 💵 $7000 – $8000 USD/month — paid in USD, bi-weekly via Deel
• 🌎 Fully Remote — work from anywhere in Latin America
• 📄 Long-term contract — starting with a 6-month contract, then full-time
• 🏖️ Paid PTO — [Insert details per role]
• 🤝 Referral Program — earn a bonus for referring talent that gets hired

To Apply

Please send your resume in English. Include the following:

• 🔗 LinkedIn Profile URL (required)
• 💻 GitHub Repository (required)
• 📜 Certifications — if applicable (e.g. AWS, Azure)
• ✉️ Cover Letter — tell us why you're excited about this specific role (optional but encouraged)

Company Description

OneSeven Tech is an applied AI company. We consult, build, and deploy AI systems that solve specific real-world problems inside operational workflows. The result is measurable: lower cost, faster throughput, fewer errors, and better decisions.

We take responsibility for the whole path from operating problem to new way of working: mapping the workflow, redesigning it with AI, training the team, and staying until the change sticks.

We serve mid-market operators at startup speed. Nine years of building for venture-backed startups taught us to ship in weeks. That's the pace we bring to companies.