Key skills
PythonAIAWSGCPTerraformKubernetesServerlessCloudFormationIAMCI/CDCloud SecurityWAF
About this role
Yuno is building payment infrastructure for global market participation, empowering brands to integrate over 1,000 payment methods. As a Security Engineer, you will embed security across development and operations workflows, working with Engineering and DevOps teams to maintain secure cloud infrastructure and ensure compliance with industry standards.
Responsibilities:
- Design, build, and maintain secure and scalable internal security solutions and tools using Python to support security operations and strengthen technical controls
- Improve and manage security configurations in AWS and GCP (including WAF, Security Hub, IAM policies, SIEM integrations and other critical services) to continuously strengthen our overall cloud security posture and ensure best practices are implemented
- Implement and maintain security processes and technical controls that support compliance requirements (e.g., PCI DSS, ISO 27001/27701, SOC 2)
- Collaborate with different teams on cross-functional security initiatives, providing technical expertise and ensuring alignment with best practices
- Explore and evaluate emerging technologies and architectures (e.g., AI integrations) to ensure secure adoption
Requirements:
- 4+ years of hands-on experience in security engineering or similar technical security roles
- Strong experience designing and developing security tools or internal products to support security operations using Python
- Solid knowledge of AWS and GCP security services and configurations
- Practical experience working with compliance frameworks (e.g., PCI DSS, ISO 27001/27701, SOC 2) in cloud environments
- Strong problem-solving skills and the ability to communicate and collaborate effectively with cross-functional teams
- Verbal and written English & Spanish fluency
- Familiarity with SIEM platforms and security monitoring tools
- Experience with Kubernetes and container security
- Experience with infrastructure as code (e.g., Terraform, CloudFormation)
- Familiarity with emerging architectures (e.g., serverless, event-driven, AI integrations)
- Experience embedding security practices across the software development lifecycle, including CI/CD pipelines