Senior Security Engineer (Compliance & Controls)

About Us At Félix, we're building the financial ecosystem for Latin immigrants in the U.S., starting with a revolution in remittances. Our core product is an AI‑powered chatbot built on WhatsApp, allowing our users to send money home as easily as sending a text message. We leverage cutting‑edge technology like AI, blockchain, and stablecoins to make cross‑border payments faster, more affordable, and more accessible than ever before.We are a hyper‑growth Series B company, backed by over $100 million in funding from top‑tier global investors, including QED, Castle Island, Switch Ventures, HTwenty, Monashees, and General Catalyst Customer Value Fund. Félix was selected as an “Endeavour Entrepreneur” and was a recipient of the CrossTech FinTech Startups Award. We are a team of highly talented individuals united by our shared obsession with a single goal: empowering our customers. We all own Félix, driven by a bias for action and a true experimentation spirit to get things done with urgency and focus.Joining Félix means you will be part of a team building a legacy, a company that will outlive us all. This is a rare opportunity to apply your skills to a deeply meaningful mission—serving a community that has been underserved for too long. We are a team that is fiercely loyal to each other, where radical transparency and constructive feedback are how we grow and push for excellence. We are bold, we care less about what others are doing, and more about creating sustainable value and a product that truly makes our users' lives better. We are building the future, today.About The Role Felix is looking for a Senior Security Engineer to help scale the security and compliance foundations of one of the fastest‑growing fintech platforms operating across the Americas. This role sits at the intersection of security engineering, cloud architecture, and regulatory compliance. You will work directly with SecOps leadership and engineering teams to ensure security controls are not only documented for audits, but properly designed, implemented, and validated across our production environment.Unlike traditional compliance roles focused only on documentation, this position requires strong technical understanding of modern cloud‑native architectures. You will work closely with DevOps, AppSec, and Product Engineering teams to evaluate how systems are built, how data flows through our platform, and how security controls operate in practice. We are looking for builders who can translate compliance frameworks into real security implementations, not just auditors reviewing documentation.Your mission is to translate frameworks like SOC2 and PCI‑DSS into real security implementations that scale with Felix’s rapidly growing engineering organization.ResponsibilitiesOwn the certification readiness lifecycle for key frameworks such as SOC2 and PCI‑DSS, coordinating gap analysis, control implementation tracking, evidence strategy, and interactions with external auditors.Translate compliance requirements into practical security controls that can be implemented across Felix’s cloud‑native infrastructure.Review system architectures and technical implementations to validate whether security controls are properly implemented across infrastructure, applications, and operational workflows.Work directly with engineering teams to embed security and compliance requirements early in the system design process.Evaluate GCP‑based architectures and distributed systems to assess encryption practices, identity and access management, logging, monitoring, and secure data handling.Participate in security architecture reviews for new services, integrations, and infrastructure changes.Define sustainable evidence collection strategies to support audits while minimizing operational overhead for engineering teams.Support technical investigations during security reviews, incident response scenarios, or audit validation exercises.RequirementsStrong experience working with security and compliance frameworks such as SOC2, PCI‑DSS, ISO 27001, or similar regulatory environments.Advanced/Fluent English.Experience operating in cloud‑native environments and collaborating closely with engineering teams.Ability to understand and evaluate modern cloud architectures, particularly in GCP environments.Strong understanding of security fundamentals including data protection, identity and access management, authentication mechanisms, and common attack vectors.Familiarity with application security concepts including cryptography fundamentals, password management, and common OWASP security practices.Basic familiarity with Git‑based workflows (preferably GitHub) and modern development environments where infrastructure and applications are managed through repositories and infrastructure‑as‑code.Ability to read and understand basic scripts (e.g., Bash) and automation logic used in operational environments.Understanding of distributed systems concepts and cloud‑native application architectures.Strong analytical skills and the ability to translate compliance requirements into actionable technical guidance.These are the applicable requisites, although equivalent competencies in any of the above will also be considered.What We OfferCompetitive salaryInitial stock options grantAnnual performance bonusHealth, dental, and vision plansRemote work environment, with offices in Miami and México City; a hybrid model is preferred for those who can work there.Continuous learning opportunitiesUnlimited PTOPaid parental leaveEmpowering opportunities for growth in a dynamic entrepreneurial environmentEqual Opportunity Employer At Félix, we are committed to providing equal employment opportunities to all qualified employees and applicants without regard to race, religion, nationality, sex, sexual orientation, gender identity, age, or disability. This policy applies to all terms and conditions of employment, including recruitment, hiring, placement, promotion, training, compensation, benefits, and termination.Want to learn more about our privacy practices? Check out our Privacy Policy.#J-18808-Ljbffr