Senior Product Security Engineer in Belvo

A little bit about us:

We are Belvo, a financial API platform for Latam that enables any company or developer to access and interpret their end-users' financial information. We are turning the rich and diverse Latam financial ecosystem into a set of developer-friendly tools and APIs.

We’re a highly-technical, passionate and driven team. We have offices in Barcelona, Mexico City and São Paulo and some of us work remotely.

We are tackling a very challenging problem: connecting fintech innovators with legacy financial infrastructure. We strive to go beyond the limits of what is possible today and to do so in an elegant and developer-first way.

Our tech stack:

• We're building our platform using modern technologies, putting the focus on reliability and long-term maintainability
• We primarily use Python on the backend. We use battle-tested technologies such as Django, and we are heavy users of Python's asyncio for some parts of our stack
• We use Javascript, Vue.js and Sass on the frontend.

The infrastructure & security team is responsible for all aspects of information security at Belvo. We focus on application and infrastructure security, policy, compliance, internal awareness & training. Our customers rely on us to run their financial operations. We hold ourselves to a higher standard when it comes to protecting their data and operations.

• Proactively tackle infrastructure and application changes to improve our security posture
• Assess, research and discover security threats in our infrastructure and products
• Collaborate on the implementation of compliance and regulatory projects
• Collaborate with Product Managers to prioritize roadmap items to balance security and business risks
• Act as a subject matter expert on Infosec for the teams you collaborate with
• Foster a culture that sees security as the most important product feature

• 5+ years of experience in the information security field
• Deep technical understanding of common security vulnerabilities and risks, as well as countermeasures and compensating controls
• Natural leadership instincts with proven ability to innovate
• Strong knowledge of application security best practices.
• Demonstrable experience in security systems, Firewalls, IDS, WAF authentication, audit
• Track record of running highly secure production systems
• Willingness to solve challenging problems

• Fintech and SaaS past experience
• Experience with AWS
• Experience with Python
• Experience building large-scale platforms with a global reach

🏄 1.8km from the beach

🚀 Stock options (we are all owners and this is very important to us)

🔆 Flexible working hours

🔝 Remote friendly

🐶 Pet friendly (Barcelona)

🎊 Paid time off on your birthday

🍒 Fresh fruit every week, all-you-can-drink tea and coffee

🍻 Friday happy hours after our weekly team meetings

🙋 Training Budget

😎 Team building events

🙀 Bank holidays swap inside the same month

🔋 Fitness/ wellness stipends

🚀 Yearly offsite