Security Engineer

We’ve signed up to an ambitious journey. Join us!

As Arrive, we guide customers and communities towards brighter futures and more livable cities, it isn’t a challenge just anyone could take on. Luckily, we have something to help us make it happen. Our people and our values. We Arrive Curious, Focused and Together. Just as our entire brand is inspired by the North Star, the shining light leading travelers to their destinations since time began, our values guide us. They help us be at our best. For our customers. For the cities and communities we serve. For ourselves. As a global team, we are transforming urban mobility. Let’s grow better, together.

The Role

We are seeking a Security Engineer to join our security team. This role is a vital part of our "pre-ship" defense, focusing on security design, code review, and the implementation of security capabilities before code reaches production. You will support the core ParkMobile application, mobile web, and various internal teams to ensure our products are secure by design. Reporting to the Engineering Manager, you will have a global impact by building tools and reporting mechanisms that safeguard our entire ecosystem. This is a collaborative position that works closely with developers across the U.S. and Europe to transform urban mobility securely.

How To Make An Impact

• Enhance and fix the development pipeline by integrating advanced security tools and automated agents to bolster our security posture.
• Monitor and report on vulnerabilities across the board, providing actionable insights to internal product teams.
• Build and maintain security tooling that assists developers at every level of the product lifecycle.
• Configure and secure multi-cloud environments, specifically focusing on AWS and Google Cloud Platform (GCP).
• Implement and manage Infrastructure as Code (IaC) using Terraform and Terragrunt to ensure consistent, secure deployments.
• Develop security capabilities within CI/CD pipelines, including static and dynamic scanning (SAST/DAST) and container security.
• Collaborate with developers to remediate vulnerabilities and cultivate a culture of security awareness and continuous education.

About you

You are a proactive, growth-minded professional who views security as an enabler for development, not a roadblock. You thrive in a collaborative environment where you can use your experience to mentor others and solve complex problems. You are a "quick thinker" who enjoys the challenge of building proactive defenses rather than just reacting to incidents. You approach security with a developer's mindset, understanding the nuances of how software is built and shipped. You are curious about new technologies, such as multi-cloud transitions, and are excited to help a global team scale its security efforts.

Your background

• 5+ years of experience in application security, risk assessment, and secure code review.
• Proven experience as a Software Developer before transitioning into Security Engineering is highly preferred.
• Strong technical proficiency with Kubernetes (EKS/GKE), GitHub, and AWS security tools (GuardDuty, KMS, IAM, etc.).
• Expertise in Infrastructure as Code, specifically using Terraform as a core tool.
• Solid understanding of programming languages (e.g., Java, Kotlin, Go, or Python) and a strong command of SQL.
• Experience with multi-cloud environments (AWS and GCP) and security orchestration tools like CrowdStrike.

This role is based in Colombia.