Senior Security Engineer

Overview

A logistics technology company is hiring a Senior Security Engineer to join their Blue Team on a fully remote, ongoing independent contractor (PJ) basis. The role is open to candidates based in Brazil, with a start date of December 2025 to early January 2026. Salary is not published for this role: candidates are asked to share their target rate during the process.

This is the second Blue Team hire, so the person coming in will be partnering closely with an existing Blue Team engineer rather than working alone. The defensive security program is already embedded across the business, which means there's a real foundation to build on and a genuine peer to work alongside. The opportunity is to take that foundation further: owning incident response end to end, maturing the IR process with proper playbooks and severity models, and driving proactive improvements in detection coverage and cloud security posture across AWS and Kubernetes. Technical depth matters here, but so does the ability to bring engineering squads along, because moving the posture needle depends on people acting on findings, not just receiving them.

Key Responsibilities

• Lead security incident responses end to end, from detection through to post-incident review and follow-up
• Mature the IR process: develop playbooks, define severity models, improve communication and post-incident workflows
• Monitor and implement new security controls to protect assets and customers
• Identify logging and monitoring opportunities and build out dashboards and alerts in Datadog SIEM
• Work with identity and access management across cloud environments
• Provide insights and recommendations that enhance cloud security posture across AWS and Kubernetes
• Partner closely with the existing Blue Team engineer and collaborate with engineering squads across the business

Requirements

Must-haves

• End-to-end incident response ownership, from triage to post-mortem
• Hands-on experience with AWS security and Kubernetes environments
• Datadog SIEM: detection engineering, dashboards, alerting
• Identity and access management experience
• Strong communicator, persuasive and collaborative across engineering teams
• Organised and able to drive process improvement without waiting to be asked
• Based in Brazil, able to contract as PJ

Nice-to-haves

• Experience maturing IR programs in established but still-developing security functions
• Background working across cross-functional engineering squads on cloud posture
• Familiarity with building or refining severity models and escalation frameworks

What Success Looks Like

• IR process is noticeably more mature: playbooks documented, severity model in place, post-incident reviews running consistently
• Detection coverage has expanded, with new dashboards and alerts live in Datadog SIEM
• Cloud security posture has improved in measurable ways, with engineering squads acting on findings
• IAM controls are tighter and better understood across the business
• The Blue Team partnership is working well, with shared ownership and clear collaboration on both reactive and proactive work

Team and Culture

• Two-person Blue Team, working as genuine partners rather than independently
• Security is already embedded across the business, so this person joins with credibility and reach from day one
• The security director leads the function and is directly involved in hiring and day-to-day direction
• Engineering squads are the key stakeholders: the role requires real cross-functional collaboration, not just internal security work

Challenges

• The defensive program is established but has real room to grow, so the work is about improving within existing structures, not building from scratch, which takes both credibility and diplomacy
• Moving the cloud security posture needle depends on influencing engineering teams who have their own priorities, so technical findings alone are not enough
• The role carries genuine ownership of IR end to end, including the process maturity work, so someone who prefers to operate in a well-defined, stable environment will find the pace and scope demanding

Interview Process

Four stages: recruiter screening, interview with the security director, technical interview, and a final interview with the VP of Platform and Security.