Azumo builds and operates production AI systems for companies ranging from seed-stage startups to Meta. We are hiring a Senior Security Engineer to own the technical security posture of those systems once they are live: the infrastructure they run on, the pipelines that feed them, and the agents that act on their output. The role is fully remote across Latin America, aligned to your client's working day.
🏢 About Azumo
Azumo is a San Francisco based software development company that has been building intelligent applications since 2016. We provide nearshore AI engineering teams to organizations that need production AI faster than they can hire for it: as an embedded engineering team, as AI staff augmentation alongside an existing team, or as a full project build. Our engineers work from Latin America, aligned to United States time zones, and have delivered for Twitter, Meta, Discovery Channel, Omnicom, UnitedHealth, and CENTEGIX.
🎯 The Role
You will not be writing policy. Azumo has shipped production AI since 2016, and the work here is in the systems themselves — hardening infrastructure, closing vulnerabilities, and building the guardrails that keep AI-driven workflows safe in front of real users.
✅ Key Responsibilities
Platform and infrastructure hardening. Cloud infrastructure, APIs, internal tooling, and CI/CD pipelines: encryption, secrets management, logging, and access controls that are built in, not bolted on, and stay correct as the systems around them change.
Vulnerability management and offensive security. Scanning, penetration testing, adversarial testing, threat modeling, and manual review across everything Azumo ships into a client's environment — with remediation you drive to closed, not to ticket.
AI and agent security. Prompt-injection defense, adversarial-input testing, and guardrails for the tool-calling and agentic systems the AI Engineer lane builds — the same production behavior, hardened against misuse rather than measured for accuracy. Bounded, observable, auditable, and safe to fail.
The standing audit. Azumo runs an automated security, cost, and architecture audit across every client codebase, graded by severity down to the file and line, on day one and every day after. You own it — what it checks, how it's graded, how often it's wrong.
Monitoring, detection, and incident response. Alerting and detection for what you harden, investigation when something looks wrong, and root cause when it turns out to be something.
Work inside the client's environment. Their repositories, their tooling, sometimes their compliance review. Azumo is SOC 2 certified, client code stays in client repositories, and some engagements carry additional requirements such as HIPAA.
📌 Required Qualifications
7+ years of hands-on experience in security engineering, infrastructure security, application security, DevSecOps, or offensive security, with the engineering fundamentals to match: testing, code review, CI/CD, Git, containers, and API design.
Deep, current knowledge of the AWS ecosystem, and the judgment to secure it under production pressure, not just in a lab.
Demonstrated experience identifying and remediating vulnerabilities in live production systems.
Experience securing AI or LLM-powered systems or automated agents: prompt injection, adversarial inputs, unauthorized actions, unsafe outputs, and data leakage. This is the requirement we screen hardest on.
Active use of AI-assisted coding tools such as Claude Code, Cursor, or GitHub Copilot in real delivery work.
Strong communication skills: the ability to explain a finding to engineers and defend it to a client directly, without a translation layer in between.
