All remote jobs

Senior SecOps Engineer

Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move.

Remote from
Mexico
Salary
Undisclosed
Department
Cybersecurity
Employment
Full Time
Experience
Senior
Published
Apply before
20 Nov 2026
Listing views
46
Application actions
2
Application toolkit

Make your next move.

Prepare your resume, explore your fit, and draft a cover letter for this opportunity.

AI Summary

The role, at a glance.

Tala is seeking a Senior SecOps Engineer to build and operate cloud-native security controls for its customer-facing AWS SaaS platform. The role covers infrastructure and application security architecture, hardening, vulnerability management, threat detection, logging, prevention, and incident response. The engineer will work in a DevSecOps model with Product, Engineering, IT, DevOps, and SRE teams to automate security across cloud and CI/CD environments. Core technical areas include AWS, IAM, WAFs, firewalls, Kubernetes security, container registries, endpoint protection, and Infrastructure as Code. The position also emphasizes using AI to improve security incident management and resolution.

Role DNA

A quick view of the complexity, pace, ownership and collaboration implied by the job description.

Job Complexity

5/5
EasyHard

Pace & Pressure

4/5
RelaxedFast-paced

Autonomy Level

4/5
GuidedFull ownership

Communication Load

4/5
IndependentCollaborative
AI insightThis is a senior security engineering role requiring 5–7 years of hands-on public-cloud security experience and broad expertise across AWS, DevSecOps, containers, identity, detection, and incident response. The engineer must make architecture decisions and automate controls for a customer-facing fintech platform.

Salary analysis

Estimated compensation compared with the broader US market for similar roles.

Estimated job median (per year)Highly competitive
$105,000
US market range (per year)$85k–$125k
AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. No employer compensation is disclosed. The yearly cadence and USD estimates are inferred from the senior, full-time cloud security engineering scope; these are indicative market estimates, not employer-provided pay.

Core skills

Skills and capabilities most closely associated with this opportunity.

Sample interview questions
How would you implement defense-in-depth for an AWS-based customer-facing SaaS platform?

I would layer identity controls, network segmentation, encryption, secure configuration baselines, WAF protections, centralized logging, vulnerability management, and continuous detection. I would manage these controls through Infrastructure as Code, monitor them centrally, and validate them through regular threat modeling and incident-response exercises.

Describe how you would secure an EKS environment.

I would apply least-privilege IAM and Kubernetes RBAC, workload identities, private cluster networking where appropriate, network policies, image scanning, admission controls, secrets management, runtime detection, and comprehensive audit logging. I would also ensure node, control-plane, and container-image patching are governed through automated processes.

How do you incorporate security into CI/CD without creating excessive delivery friction?

I use a risk-based shift-left approach: automated secret detection, dependency and IaC scanning, image scanning, policy checks, and clear remediation guidance in pull requests. Critical findings should block deployment, while lower-risk findings are tracked with defined ownership and remediation timelines.

What steps would you take when a cloud security alert indicates potentially compromised credentials?

I would first validate the alert and scope affected identities, sessions, resources, and activity. I would revoke or rotate credentials, contain access through IAM or network controls, preserve logs and evidence, investigate root cause and blast radius, then implement corrective controls and document the incident.

How can AI improve security operations responsibly?

AI can assist with alert enrichment, correlation, case summarization, prioritization, and suggested remediation steps, reducing analyst toil. It should operate with access controls, human review for consequential actions, auditable outputs, and safeguards to prevent exposure of sensitive security data.

This analysis is generated from the job description. Salary estimates, role characteristics and sample answers are guidance, not employer-provided facts.
Opportunity details

About this role.

About Tala

Tala is the AI-native credit infrastructure that connects global capital to the global majority. We combine proprietary risk intelligence with an expanding network of capital and distribution partners to power credit access at scale. To date, Tala has distributed more than $9 billion in capital to more than 14 million customers across Africa, Latin America, and Asia, building the definitive contextual dataset on thin-file borrowers in emerging markets. Tala is now converting that foundation into shared infrastructure that partners, capital providers, and ecosystems can build on.

The company has been named to the Fortune Impact 20 list, CNBC’s World’s Top Fintech Companies twice, CNBC Disruptor 50 for five years, and Forbes’ Fintech 50 list for ten years running.

Given the global nature of our team, we operate on a remote-first approach with office hubs in Santa Monica, CA (HQ); Nairobi, Kenya; Mexico City, Mexico; Manila, the Philippines; and Bangalore, India.

Most Talazens join us because they connect with our mission. If you are energized by the impact you can make at Tala, we’d love to hear from you!

The Role

We are currently seeking a Sr SecOps Engineer to design, implement and maintain suitable infrastructure and application security solutions on AWS public cloud environments using DevSecOps mindset. You will bring world class cloud-native security expertise to implement solutions for security configuration hardening, vulnerability management, detection, protection and monitoring of security threats and intrusions, in an automated fashion.

What You’ll Do

  • Driving the design and implementation of defense-in-depth infrastructure and application security solutions for our customer facing SaaS platform in AWS public cloud environments

  • Driving architecture, implementation, configuration and automation of native and third party cloud security solutions for hardening, detection, prevention, logging and response solutions for security vulnerabilities and threats

  • Provide thought leadership with a security bent of mind to the organization

  • Working closely with Product, Engineering and IT in a DevSecOps model on technologies like FWs, ACLs, WAFs, IAM roles and permissions, Vulnerability management and hardening, Threat and Intrusion detection, Kubernetes Container Security solutions, Pen Test and endpoint security

  • Assisting in incident response and triaging activities as needed for security incidents and events

  • Using AI in security operations to streamline and optimize the security incident management, resolution.

What You’ll Need

  • 5-7 years of previous experience deploying and administering security infrastructure in AWS public cloud environments, using Infrastructure as Code required

  • In-depth hands-on experience with at least one public Cloud platform (AWS or GCP) with advanced knowledge of securing IaaS platforms and services like WAFs, Security Groups, EC2/Compute, EKS/GKE, ECR/GCR, S3/Cloud Storage, RDS/Cloud SQL, Logging and Monitoring

  • Prior experience working closely with Product, DevOps and CloudOps’ Site Reliability Engineers on shift-left strategies, CI/CD tools and solutions needed

  • Experience working on DLP and endpoint security product is a big plus

  • Security experience in a cloud native environment in one or more areas: authentication, access management, API security, Linux security, vulnerability scanning, threat and intrusion detection, firewalls, WAF, encryption technologies, container security etc.

  • Experience using a programming language such as Python for automation (would be a plus)

  • Security certifications from AWS, GCP , CISSP, CEH, OSCP preferred

Compensation

Additional Information

Our vision is to build a new financial ecosystem where everyone can participate on equal footing and access the tools they need to be financially healthy. We strongly believe that inclusion fosters innovation and we’re proud to have a diverse global team that represents a multitude of backgrounds, cultures, and experience. We hire talented people regardless of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status.

Apply now >

This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.

Next step

Apply now.

Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.

Did you apply?Let us know, and we’ll help you track your application.

Continue on the employer website

Protect your personal information and never pay to secure an interview or job offer. .

Log in to save
One quick step before you apply

Sign in to continue.

Sign in or create a free account to continue to the employer's application.

Applying is free. After signing in, return to this job and select Apply Now.
Add alert
Jobs Talent AI Tools Salaries
Menu