3 days ago
Chile (city not specified)Mid Level
Responsibilities
- Improve security in the software development lifecycle through code and design reviews, threat modeling, WAF management, penetration testing, vulnerability scanning, and remediation support.
- Triage SIEM and SentinelOne alerts, investigate incidents, tune correlation rules, and create threat-intelligence-driven detection use cases.
- Design and secure solutions in GCP and AWS, manage cloud configurations, automate controls, monitor CSPM posture, and respond to cloud vulnerabilities or incidents.
- Administer endpoint, operating system, internal network, and IAM security, including EDR, patching, secure configurations, access changes, and privilege reviews.
- Maintain security policies and procedures, identify and mitigate organizational risks, and support PCI DSS and ISO 27001 certification activities.
- Document processes and controls, monitor emerging attack and fraud trends, and coordinate technical security fixes.
Requirements
- At least two years of experience in security, IT, or infrastructure.
- Foundational knowledge of networking, Linux, and GCP or AWS.
- Experience documenting processes and security controls.
- Strong organization, communication, teamwork, autonomy, adaptability, and full-time availability.
- SIEM/EDR experience and participation in PCI or ISO audits are desirable.
- Security+ certification, eJPT, or a similar qualification is desirable.
- Knowledge of payments, money flows, cards, payment processing, or payment methods is desirable.
- Experience working across countries such as Brazil or Mexico is a plus.
Tech Stack
Categories
About Toku
Toku builds a SaaS platform for payment operations and automated collections for businesses in Latin America. It combines local payment infrastructure (Chile, Mexico, Brazil) with AI agents that contact customers, process payments, reconcile invoices, and handle account support, with integrations to ERP/CRM systems. Founded in 2020 and headquartered in Santiago, it is privately held and certified ISO 27001 and PCI DSS Level 1.