Security Engineer

About AvivaAviva is creating the first "phygital" neobank for emerging communities in Mexico, blending advanced technology with a human touch to deliver a unique conversational banking experience. Using machine learning, natural language processing, and computer vision, our onboarding removes historic barriers that have excluded millions from the formal financial system. By pairing AI-driven credit models with a cost-efficient micro-branch network, we make credit accessible and affordable in communities overlooked by banks and digital-only fintechs. Aviva now operates in more than 100 Mexican towns, focusing on cities of >500,000 inhabitants where financial access is even more limited.The Role: Security EngineerWe are seeking a Security Engineer responsible for strengthening, scaling, and operating Aviva's cybersecurity posture. You will implement key security solutions in Azure, safeguard sensitive data, support regulatory certifications, and collaborate with engineering, product, and operations teams.This role combines strategic vision with technical execution and carries significant responsibility over Aviva's critical infrastructure. It offers a clear path for growth within the Security team.What You'll DoLead the ISO27001 certification process, adjusting and managing documentation in coordination with the external provider.Implement, manage, and enhance Microsoft security solutions: desktops, servers, AD, GPOs, Entra ID, Intune, DSC.Configure VNETs, Firewalls, and key Azure network/security resources.Ensure protection of DNS, email systems, Office 365, including Conditional Access controls.Integrate security best practices into CI/CD pipelines (GitHub Actions / Terraform).Implement DLP policies and AIP solutions for data classification, labeling, and encryption.Ensure compliance with applicable data protection regulations.Monitor threats and vulnerabilities using EDR and SIEM tools.Create and maintain PowerShell scripts to automate security processes.Collaborate with cross-functional teams to resolve incidents and implement best practices.Lead remediation initiatives resulting from risk or infrastructure assessments.Requirements:You BringEducationBachelor's degree in Computer Science, Engineering, or related fields.Experience3–5 years in technical security roles, ideally in financial environments.Proven experience with Microsoft Azure security solutions.Prior work in corporate security and regulatory compliance.Knowledge of and hands-on experience with ISO 27001 certification processesTechnical SkillsManagement of AD, GPOs, Entra ID, Intune, Windows Autopilot.Authentication protocols: SAML, OIDC, Kerberos.Office 365 security controls.Implementation of VNETs, Firewalls, Azure network/security resources.Experience with EDR and SIEM.PowerShell scripting.CI/CD security (GitHub Actions, Terraform).DNS security, email security, DLP, and AIP.Soft SkillsClear, concise communication tailored to executive audiences.Proactive mindset and strong problem-solving ability.Ability to work autonomously in a fast-paced, dynamic environment.Fluent in spanishNice to HaveExperience with Terraform.Experience with Google Cloud security.What we offer?Competitive base salary.15 days of Christmas bonus.7 days off per year.1 birthday day off.12 days of annual vacation.100% Remote work.Strong growth opportunities within the Security team.Why Join Us?Operates within one of the fastest-growing fintechs in Latin America.Build solutions that directly impact financial inclusion.Work with a world-class team at the intersection of finance, technology, and impact.Contribute to a mission that is transforming credit access for millions.High-autonomy environment with rapid learning and growth.