Cloud Security Engineer

Addi S.A.S.

Job Overview

Location

LatAm

Job Type

Full-time

Full Job Description

📋 Description

• Own and drive cloud security across Addi's AWS infrastructure, laying the technical foundation for a mature, scalable cloud security program by building CNAPP from scratch, hardening the cloud environment, and establishing secure infrastructure-as-code standards using Terraform.
• Conduct comprehensive cloud security assessments across all AWS accounts within the first 60 days, design and operationalize CrowdStrike CNAPP, assess Terraform codebase for secure IaC standards, maintain cloud security controls for ISO 27001 certification, and establish continuous cloud security monitoring and alerting within CrowdStrike NG-SIEM.
• Join a leading financial platform serving over 2 million customers and partnering with 20,000 merchants, backed by top-tier investors including Andreessen Horowitz and Goldman Sachs, as Addi transforms Latin America’s financial ecosystem through conscious, values-driven technology.
• Develop expertise in cloud-native application protection, infrastructure-as-code security, compliance automation, and cross-functional risk remediation while shaping Addi’s cloud security posture from the ground up in a high-growth fintech environment.

🎯 Requirements

• Deep AWS Security Expertise including hands-on experience securing AWS environments (IAM, VPC, S3, CloudTrail, GuardDuty, Security Hub, KMS) and understanding of the AWS shared responsibility model
• CNAPP / CSPM Operational Experience with platforms like CrowdStrike Falcon Cloud Security, Wiz, or Prisma Cloud, including ability to configure detection rules, suppress false positives, and build cloud security dashboards
• Experience managing cloud security findings end to end, from identification and prioritization through remediation tracking and closure, with ability to assess risk based on exploitability, exposure, and business impact
• Comfortable working as an individual contributor embedded in a cybersecurity team, partnering closely with platform and engineering teams, and able to translate complex cloud security risks into clear, prioritized recommendations
• Hands-on experience writing and reviewing Infrastructure as Code in production AWS environments (Nice to Have)
• Familiarity with ISO 27001 requirements as they apply to cloud environments and experience gathering evidence for audits (Nice to Have)

🏖️ Benefits

• Work on a problem that truly matters – redefining how people shop, pay, and bank in Colombia, breaking down financial barriers and empowering millions
• Be part of something big from the ground up – shaping the company’s technology, strategy, culture, and values as an owner, not just an employee
• Unparalleled growth opportunity in a high-impact role at a fast-scaling fintech lender tackling a massive market
• Join a world-class team of top-tier talent where excellence, ownership, and collaboration are core values
• Competitive compensation & meaningful ownership – generous salary, equity in the company, and benefits that go beyond the basics

Skills & Technologies

AWS

Terraform

Onsite

Ready to Apply?

Apply Externally

You will be redirected to an external site to apply.

Addi S.A.S.

Visit Website

About Addi S.A.S.

Addi is a Colombian fintech company that offers a buy now, pay later (BNPL) solution for consumers in Latin America. The company partners with merchants to provide point-of-sale financing, allowing customers to purchase goods and services and pay for them in installments. Addi focuses on making credit accessible and affordable, particularly for individuals who may not have access to traditional banking services. Their platform aims to simplify the purchasing process and empower consumers with flexible payment options, thereby driving sales for their merchant partners and promoting financial inclusion within the region.

View Company Profile

Get more remote jobs like this

Subscribe to the weekly newsletter for similar remote roles and curated hiring updates.

Weekly remote jobs and featured talent.

No spam. Only curated remote roles and product updates. You can unsubscribe anytime.