Appsec Senior Engineer at Pomelo

We are a leading force in the Latin American financial technology sector, specializing in the issuance, processing, and management of card businesses. Our mission is to build world-class financial infrastructure that empowers companies to launch credit, debit, and prepaid cards with speed, agility, and the highest security standards. By offering simple API integrations and cloud-native technology, we help our clients modernize their infrastructure and expand their reach across the entire region. We are a team of over 250 professionals, and as we continue to grow throughout 2025, we are looking for passionate individuals to join our mission of revolutionizing the financial ecosystem.

The opportunity

We are looking for a senior AppSec Engineer to join our InfraSec team. In this role, you will be a key player in ensuring the security of our services as we scale. You will bridge the gap between development and security, helping us maintain a robust posture while we build better cards. This is a full-time, remote position where you will have the autonomy to influence our security roadmap and protect our infrastructure from development all the way to production.

A day in the life

• You will perform comprehensive security testing on our AWS-hosted services and applications to ensure they remain resilient against threats.
• You will take charge of vulnerability management, guiding development teams through the entire lifecycle of security findings.
• You will manage our internal security technology stack, developing automations in languages like Bash, Python, or Go to streamline processes and strengthen our defenses.

Who you are

You are a security professional with over five years of experience in AppSec, OffSec, or Red Team roles. You are comfortable working in a fast-paced, startup-oriented environment and possess the following qualifications:

• Proven experience with pentesting on APIs, conducting assessments, and running incident simulations.
• Deep familiarity with security tools including SAST, SCA, and DAST.
• Knowledge of compliance standards such as PCI 4.0 and ISO 27001.
• Strong technical skills in secure code reviews and vulnerability remediation.
• Fluency in Spanish to collaborate effectively with our regional team.
• A collaborative mindset with the ability to partner with infrastructure and development teams to design secure solutions.

Why you'll love it here

Joining us means becoming part of a high-performance, collaborative team backed by leading investors and founders of major tech unicorns. We value the unique perspective you bring to the table and provide an environment where you can make a genuine impact. Our benefits include:

• The flexibility to work fully remote or from a co-working space of your choice.
• Stock options, ensuring that you share in the success and growth of the company.
• A culture that celebrates diversity and encourages you to be your authentic self.
• The opportunity to grow your career alongside talented individuals in a dynamic, regional fintech company.