Tech Lead

Description

Job Summary: We are seeking a technical security leader to drive the digital transformation of a key client, embedding secure development practices and supporting teams building high-volume transactional platforms. Key Highlights: 1. Technical leadership in security for high-volume digital products 2. Drives Secure SDLC and DevSecOps in digital initiatives 3. Defines security standards for web, mobile, and API applications At INSSIDE, we seek the individual who will become the technical security reference for the entire digital transformation of one of our most important clients. This is a build-from-scratch role: implementing secure development practices while supporting development and architecture teams on ultra-high-volume transactional platforms (wallets, payments, loyalty, and e\-commerce). **Work modality**: Remote (with occasional in-person presence at our Olivos, CABA offices). **What challenges will you face?** **Technical leadership and secure architecture** * Serve as the primary technical security reference for the company’s digital products. * Lead Threat Modeling exercises and technical reviews of architecture and design for new solutions. * Define organization-wide secure development standards, patterns, and best practices. * Evaluate technologies, frameworks, and architectural patterns from a security perspective, in collaboration with Enterprise Architecture and Cloud Architecture. * Provide technical guidance to internal teams and our primary strategic vendor (Spain), and deliver technical mentoring within the team. **Secure SDLC and DevSecOps** * Implement and promote adoption of Secure SDLC across all digital initiatives. * Define minimum security requirements for CI/CD pipelines. * Oversee integration and effective use of SAST, DAST, SCA, and Secret Scanning tools. * Participate in code reviews and technical approval processes, managing exceptions and accepted risks. **Vulnerability management and customer protection** * Analyze penetration test and bug bounty results, defining risk-based remediation strategies and prioritization. * Establish security standards for web, mobile, and API applications. * Define controls for fraud prevention and Account Takeover, evaluating MFA, Device Binding, and session management. * Participate in Wallets, Loyalty, E\-commerce, and other high-volume transactional digital experience projects. **Technical governance** * Act as the technical liaison for Product Owners, business leaders, and executive sponsors. * Translate technical risks into actionable insights for non-technical stakeholders. * Support definition of security roadmaps and present recommendations in relevant committees when required. **What are we looking for?** **Must-have qualifications:** * 8\+ years of experience in Application Security, Security Engineering, Security Architecture, DevSecOps, or related disciplines. * Experience leading technical initiatives and defining security standards. * Strong working knowledge of OWASP Top 10, ASVS, API Security Top 10, Secure Coding, and Threat Modeling. * Experience in Cloud Security on AWS and/or Azure (IAM, secret management, hardening, distributed and serverless architectures). * Practical knowledge of CI/CD pipelines and SAST, DAST, SCA, and Secret Scanning tools. * Proficiency with REST APIs, OAuth 2\.0, OpenID Connect, JWT, and microservices security. * Conversational English and Portuguese, to interact with regional teams and our primary vendor in Spain (advanced fluency not required). **Nice-to-have qualifications:** * Background in digital wallets, payment processing, fraud prevention, or digital identity and authentication. * Experience in omnichannel retail, delivery platforms, or SaaS companies with modern cloud architectures. * Prior experience in software factories or development consultancies, collaborating with multiple teams, clients, and technology stacks. * Knowledge of PCI DSS and security controls applied in regulated environments.