Position Summary We are hiring a
Security Engineer to support a high-impact enterprise initiative focused on
secrets management and remediation, with an initial emphasis on exposed secrets found in
GitHub Enterprise repositories. This project is part of a broader security posture optimization effort within a Fortune 50 IT environment, and you'll be part of a globally distributed team executing on critical remediation and burndown strategies.
In this role, you will work closely with application teams to support and drive remediation efforts across source code repositories, helping resolve risks tied to plaintext credentials such as API keys, personal access tokens (PATs), and SSH keys. You'll also contribute to reusable remediation workflows, coordination playbooks, and continuous improvement of burndown velocity.
This opportunity is ideal for professionals based in
Latin America (LATAM) with hands-on experience in secure source code practices and a strong interest in DevSecOps and secrets management within GitHub environments.
Key Responsibilities - Execute remediation workflows for secrets identified in GitHub repositories, including tokens, credentials, and other sensitive strings
- Collaborate with application teams to coordinate and validate remediation actions
- Participate in structured burndown campaigns by tracking remediation progress, escalating blockers, and validating resolution outcomes
- Contribute to standardized processes and documentation to enhance remediation speed and consistency
- Work across distributed teams to support project-wide goals tied to secrets hygiene, secure development practices, and posture improvement
Required Qualifications - 3-5 years of experience in cybersecurity, DevSecOps, or application security roles
- Hands-on experience working with GitHub or equivalent version control platforms, especially with a focus on code hygiene or secret detection
- Familiarity with common secret types including API keys, SSH keys, access tokens, and credentials embedded in code
- Strong collaboration and communication skills for working with both engineering teams and stakeholders
- Fluency in English (spoken and written) and comfort working in a distributed team model
Preferred Qualifications - Experience with secret detection tools such as GitGuardian or GitHub Advanced Security
- Exposure to ServiceNow or other remediation workflow platforms
- Awareness of posture monitoring platforms such as Prisma Cloud, which will be part of the long-term enterprise security strategy
- Prior experience supporting security remediation efforts in consulting or enterprise environments
- Understanding of secure development practices and basic principles of secrets governance
Why Join Us? - Support the remediation of real-world security risks in one of the world's leading enterprise IT environments
- Collaborate across regions as part of a global DevSecOps initiative
- Gain experience with industry-leading platforms such as GitHub, GitGuardian, and Prisma Cloud
- Play a visible role in helping reduce vulnerabilities and improve enterprise secrets hygiene
- Join a remote-first team with growth potential, skill-building opportunities, and high impact visibility
