173 remote cybersecurity roles open to candidates in Colombia, 2 added this week, all at fully remote, VC-backed startups. Matcha reads every posting daily and emails you only the ones that fit.
Describe your next role, cut the noise
173 open roles · 2 new this week · 80% not on LinkedIn
Airtm enables fair, flexible global payouts for digital entrepreneurs worldwide.
Own and build security for cross-border payments/stablecoin infrastructure; on-call for security incidents; 8+ years security, 3+ years leading teams, AWS, Kubernetes, AppSec, SIEM, SOC 2/ISO 27001/PCI-DSS, TypeScript/Node.js, Terraform, CI/CD, AI tooling; bonus: fintech/crypto, CISSP/CISM/OSCP
Remote LATAM only
Cybersecurity startup delivering a platform to manage security programs.
Owns internal audit QA and client-facing security program support for cybersecurity compliance; 3+ years in info security/compliance/audit, SOC 2/ISO 27001/HIPAA/GDPR/PCI, AWS/Azure/GCP/Kubernetes/Docker/Terraform, audit evidence review; bonus: CISA/Security+/CISSP/CISM; Series A, equity
Remote US or LATAM
Secure, high-performance cloud object storage for AI, backups, media, ransomware protection.
Own realistic adversary emulation across web, APIs, cloud, identity, endpoints, and AI systems; must have red teaming/offensive security experience, MITRE ATT&CK, OWASP LLM/agentic security familiarity, scripting/software development; bonus: purple teaming, cloud-native or AI-enabled systems
Remote from Colombia, Costa Rica, or Mexico only
Fintech empowering consumers with POS financing and digital payments.
Own zero-trust network controls for fintech infrastructure across Kubernetes and AWS; on-call required; 6+ years, Kubernetes networking, AWS networking, mTLS, Terraform, Helm, Go/Python/Bash, PCI DSS, AI tooling; bonus: Cilium/eBPF, SPIFFE/SPIRE, ZTNA, OPA/Kyverno
Remote Latin America only
Fintech empowering consumers with POS financing and digital payments.
Own zero-trust network engineering for a fintech platform across Kubernetes and AWS; on-call rotation; 6+ years, Kubernetes networking, AWS networking, mTLS, Terraform/Helm, Go/Python/Bash, PCI DSS, AI tooling; bonus: Cilium/eBPF, SPIFFE/SPIRE, ZTNA, OPA/Kyverno
Remote from Colombia only
Open-source BI tools simplifying enterprise data measurement, analysis, sharing.
Own offensive product security and secure-by-default improvements for BI software; must find/exploit app vulns via source analysis, assess runtime behavior, implement fixes; skills: authn/authz, injection, untrusted data, strong engineering, Clojure or learn; Series B, equity, async-first
Remote anywhere
Award-winning, simple money management solutions for small businesses.
Own application security for mobile-money/fintech systems, including AI agent guardrails and API/database security; remote only within UTC -5 to +4; 7-8 years total, 3-5 in security, strong Python, fluent English; small 4-person security team, equity
Remote anywhere between UTC -5 and UTC +4
Production-ready AI for regulated workflows, with governance, traceability, explainability.
Own Azure cloud infrastructure for enterprise MCP connectivity and Microsoft Foundry model access; 7–10+ years; Azure APIM, Entra ID, VNets/Private Endpoints, Key Vault, Terraform/Bicep, Azure DevOps or GitHub Actions, Azure Monitor, Application Insights, KQL; bonus: financial services, Azure OpenAI/Foundry, certifications, AKS/Docker; 22-week two-phase programme
Remote policy unclear
People and Company Intelligence
Own IT/security operations for a remote workforce; 3-5 years managing IT/security/technical ops teams, 3+ years in fully remote environments, AWS IAM/CloudTrail/Inspector/Organizations+SCP, SSO/Okta, Vanta, Python/Bash; bonus: Tailscale, SentinelOne, 1Password, Pulumi/Terraform, Datadog; manages 1 report; profitable, growing; stock
Remote anywhere
AI marketing platform helping SMEs create and promote high-performing content.
Own company-wide product and infrastructure security for an AI ads platform; fluent Ukrainian, B2+ English; 7+ years engineering, 3+ years security role, backend in Node/JS/TS, Java or C#/.NET, DevOps/cloud, incident response, AWS cert, SOC 2/ISO 27001; profitable, high-growth
Remote anywhere
AI marketing platform helping SMEs create and promote high-performing content.
Own vulnerability remediation and incident response for an AI ads platform’s product and AWS infrastructure; fluent Ukrainian, English B2+; 5+ years engineering, 2+ years security, backend in Node.js/JavaScript/TypeScript, Java, C#/.NET, Go, or Rust, AWS; bonus: security certs, SOC 2/ISO 27001/CASA, GDPR/CCPA
Remote anywhere
Global cross-border crypto venture fund from day one.
Matched into portfolio security engineering roles across crypto infrastructure; bonus: crypto/fintech, blockchain security, cryptographic signing, SOC 2/ISO 27001, founding security experience; spans early-stage to founding roles
Remote worldwide across portfolio companies; remote, hybrid, and in-person opportunities globally
Blockchain security leader with open-source libraries and development platform.
Own smart-contract security research, audits, design reviews, and co-creating protocol contracts for web3/onchain finance; advanced English; Solidity, Ethereum/EVM, smart-contract design/development, AI-native workflows/tooling; bonus: non-EVM chains, formal verification/fuzzing, appsec, audit contests, public research.
Remote anywhere
Masabi powers seamless transit payments with innovative technology.
Own security control processes for a public-transport fare payment platform; Colombia-based only; hands-on security/compliance or audit experience, security concepts, clear writing; bonus: TPRM, ISO 27001/SOC 2/PCI DSS/GDPR/NIST, GRC tools, automation, Jira/Confluence
Remote Colombia only
Cybersecurity startup delivering a platform to manage security programs.
Own client security/compliance programs for a cybersecurity platform; 4+ years in infosec/compliance/audit; SOC 2, ISO 27001, HIPAA, GDPR, PCI, NIST, CMMC, cloud/infrastructure, client-facing/project management; bonus: CISA/CISSP/CISM; Series A, equity
Remote LATAM only
AI-powered hospitality software leader improving guest experience and revenue.
Lead and grow the security team; own security and compliance for a hotel SaaS handling guest data and payments; 8+ years security engineering, 2+ years team leadership, SOC 2/PCI DSS/ISO 27001, AWS, IAM, app security, vulnerability management, vendor risk; bonus: hospitality/fintech/payments, CISSP/CISM/CISA
Remote in LATAM or the United States
Empowering developers to build on Bitcoin, growing Rootstock and decentralized tech.
Secures Bitcoin-backed DeFi infrastructure; reviews source code, smart contracts, and protocol changes; threat modeling and architecture reviews with development teams; owns bug bounty triage/validation and coordinates external audits through remediation; builds security automation including AI-assisted code review, scanning, findings triage, CI security checks, monitoring alerts, and hardening; researches EVM, bridge, and p2p attack techniques and supports application-layer incident investigations; requires 3+ years in application/security engineering, secure code review in Java plus one of TypeScript/JavaScript, Python, Go, or Rust, blockchain security experience in Solidity/EVM or protocol/node security, security automation experience, and fluent English; bonus: bug bounty/disclosure programs, network or consensus attack mitigation, offensive security background, public security research, C/C++, fuzzing
Remote within UTC-3 to UTC+2 time zones; effectively Europe through Argentina-aligned LATAM time zones
Blockchain security leader with open-source libraries and development platform.
Own and mature the company's Information Security, Privacy & IT program end-to-end under Legal; manage the team and department OKRs, risk posture, multi-year roadmap, and technology budget/procurement; lead AI security and governance for internal AI adoption including agentic infrastructure, model-provider/vendor diligence, retention/training-use commitments, DPAs, subprocessors, and EU AI Act readiness; own audit/certification/attestation strategy and execution including SOC 2 Type 2, ISO/IEC 27001, pen testing, internal audits, vendor risk, and customer security diligence with regulated financial institutions; own privacy/data governance including data mapping, classification, records of processing, GDPR and CCPA/CPRA compliance, and privacy-by-design reviews; own incident response, breach notification with Legal, bug bounty programs, and partner with development teams on SDLC security; oversee IAM, provisioning, endpoint/MDM, physical security, disaster recovery, business continuity, backups, and automation/AI-enabled IT ops; requires 10+ years in Security and IT, including 3+ years leading IT Security and GRC in a high-growth tech company, with executive/board-facing ownership of a security program; must have experience securing or governing AI/LLM-enabled products or enterprise AI adoption; bonus: 5+ years in blockchain or fintech serving enterprise clients
Remote anywhere
Secure, high-performance cloud object storage for AI, backups, media, ransomware protection.
Application security engineer for customer-facing software powering cloud storage and backup products; hands-on role embedding security into product features, data storage, and customer usage patterns; builds and maintains security features, performs security assessments and code reviews, develops security automation/tooling, supports bug bounty and vulnerability handling, investigates and remediates reported issues, and guides engineering on vulnerabilities; strong emphasis on using AI tools/frameworks and coding agents for both development and security workflows; works across a large multi-server web stack including Apache Tomcat, JSP, Node/JavaScript, browsers and custom clients; requires application development plus security expertise, OWASP Top 10 knowledge, cryptography and secure authentication, cloud and Linux experience, familiarity with HTTP/REST, and security testing tools such as SAST/DAST, fuzzing, and vulnerability scanners; experience with Java, JSP, JavaScript, TypeScript, Go, Python, and C/C++
Remote LATAM only: Argentina, Colombia, Costa Rica, and Mexico
Postgres development platform offering database, authentication, APIs, and real-time subscriptions.
Secures infrastructure, cloud platform, Kubernetes environments, and containerized workloads; partners with infrastructure, platform, SRE, product engineering, and technical leadership; focuses on threat modeling, architecture reviews, technical risk assessments, AWS security posture, Kubernetes/container hardening, Linux isolation risks, and building automation, guardrails, secure defaults, detection, and review frameworks; requires senior-level experience in platform/cloud/infrastructure/container security or security engineering; strong hands-on AWS, Kubernetes, containers, and Linux security fundamentals; experience in large cloud environments, multi-cluster Kubernetes, developer platforms, SaaS platforms, or high-scale infrastructure teams; async written communication emphasized
Remote anywhere
Scaling Ethereum via zkSync L2 to expand global freedom.
Candidates must have a proven record in security engineering or research with experience in threat modeling and vulnerability analysis. Proficiency in strongly typed languages like C++, Go, or Scala is required, along with deep knowledge of algorithms and distributed systems.
Remote anywhere
Decentralized, remote-first blockchain team improving Web3 developer experience worldwide.
Candidates must have experience with secure coding practices, memory safety, and code auditing within decentralized systems. A strong background in vulnerability analysis and an offensive security mindset are essential for this role.
Remote-first global role; can work from anywhere. Contractor via UK entity; background check required.
AI-driven mobile security leader protecting apps and devices.
Candidates must hold a bachelor's degree in computer science or a related field with 1-5+ years of experience in enterprise software support. Strong technical proficiency in SQL, scripting languages, and mobile device management solutions is required.
Remote in India. Customer-support engineering for enterprise mobile security; no other region restrictions stated.
Compliant-first B2B data and sales intelligence for European revenue teams.
Candidates should have 1-2 years of experience in security, GRC, or IT audit with a working knowledge of ISO 27001 and SOC 2. Strong communication skills and a detail-oriented, process-driven mindset are essential for success in this role.
Original Zcash developers form ZODL and Zodl wallet.
Candidates should have experience with open-source software development and overseeing the security aspects of protocol implementation. Strong leadership, communication skills, and the ability to make informed decisions under pressure are essential for this management role.
Remote-first; can work from US, Chile, Czech Republic, France, Slovakia, UK, and New Zealand. No other restrictions stated.
Global payout platform for businesses with free payouts and rewards.
The ideal candidate has extensive hands-on security experience in high-growth environments and the ability to bridge the gap between technical implementation and business risk. You must possess an engineer's mindset with proficiency in modern infrastructure and the judgment to prioritize security initiatives effectively.
Fully remote; work from anywhere in the Americas. No other location restrictions stated.
Open-source Python SDK and FastAPI server for 100+ LLM APIs.
Candidates should be security generalists with deep expertise in auditing Python code and securing cloud-native environments. A background in CTFs, vulnerability research, and familiarity with LLM-specific attack surfaces is highly desired.
Remote location not specified; open to worldwide applicants. No region-based restrictions mentioned.
AI-powered defense platform delivering targeting, planning, and deterrence at edge.
Requires 7+ years of software engineering experience with strong backend expertise in languages like Python or Java and proficiency in full-stack development using React and Node.js. Must have deep knowledge of identity and authentication protocols such as OAuth 2.0, OIDC, and SAML.
Remote-friendly; no stated regional restrictions. Travel may be required for clearance-related user visits.
Largest licensed stablecoin payments orchestrator, enabling emerging-market international payments.
Own SOC detection/response and AWS/EKS cloud security posture for fintech stablecoin infrastructure; English required, cross-timezone collaboration; 3–5 years, AWS IAM/GuardDuty/CloudTrail, Kubernetes/EKS, SIEM, CSPM, Terraform/CloudFormation, incident response, Python/Bash; bonus: AWS Security Specialty, Datadog/Wiz/Orca, SOAR, crypto
Remote policy unclear
Subscription-first publishing platform aligning incentives between creators and paying audiences.
Own app security for open-source publishing platform; UTC-6 to UTC+2, on-call; appsec ownership for real product, Node.js, TypeScript, web security, coordinated disclosure, AI-assisted security; bonus: open source, multi-tenant SaaS, corporate security; profitable, 4-day week
Remote anywhere; timezone overlap required: UTC-6 to UTC+2
Developer-focused email platform and tools.
Requires experience securing production cloud infrastructure and multi-tenant SaaS products with the ability to write and read code. Proficiency in IAM, authentication, and secure deployment pipelines is essential.
Remote in Americas or Europe timezones; some travel for offsites/events.
Developer-focused email platform and tools.
Requires experience securing production cloud infrastructure and multi-tenant SaaS products with the ability to write and read code. Proficiency in IAM, authentication, and secure deployment pipelines is essential.
Remote based in Americas or European timezones; fully remote.
AI agents for AI factories
Candidates should have a proven understanding of security risks associated with reinforcement learning and autonomous agents, along with at least 5 years of experience in product security or a related field. Strong programming skills in Python or Go and experience securing cloud infrastructure are also required.
100% remote; no office; international hires; async, docs-first.
Candidates should have a bachelor's degree and legal authorization to work in the U.S., with a preference for 5+ years of professional experience in software security. A solid understanding of web application security and experience with development teams is also preferred.
Remote in the United States only; not global.
Candidates should have a minimum of 3 years of related experience and software development experience in languages like Java, JavaScript, Python, or Go. Knowledge of security vulnerabilities and secure coding practices is essential, along with experience in leading secure code reviews and discussions.
Remote within country; office optional; stable internet required.
AI, Uncomplicated.
Candidates should have proven experience in frontend web UI projects and proficiency in Typescript and JavaScript. A Bachelor's or Master's degree in a related field and an active security clearance are also required.
Remote policy not stated in the job posting.
AI, Uncomplicated.
Candidates should have proven experience in building microservices and managing cloud infrastructure, along with proficiency in programming languages like Python, Go, or Typescript. A Bachelor's or Master's degree in a related field and an active security clearance are also required.
Remote policy not stated; some travel is required.
The Intelligent Work Management Platform
Candidates should have 8+ years of experience in technology, with at least 5 years in a senior role related to Site Reliability Engineering or DevOps. A BS or MS in Computer Science or a related field is preferred, along with expertise in cloud services, Infrastructure as Code, and security operations.
Remote in the U.S. only; telework allowed, role-specific.
Candidates should have a Bachelor's degree in a relevant field and at least 5 years of experience in software development or DevOps roles. Proficiency in object-oriented programming, cloud technologies, and Agile methodologies is essential.
Remote policy not stated; location-based eligibility.
Your global engagement and transformation partner.
Candidates must have an active security clearance and a degree in Computer Science or Software Development, along with at least one year of experience in Python development and AWS serverless architecture. Familiarity with federal cybersecurity requirements and various analytics is also required.
Primarily telework with occasional on-site meetings in DC metro area.
Candidates should have 5+ years of experience in cybersecurity or related fields, with at least 3 years focused on securing public cloud environments. A strong understanding of cloud security controls and experience with DevOps practices are essential.
Remote home office; hybrid possible within 75 miles; flex option
Candidates should have 5+ years of experience in cybersecurity, DevOps, IT, or engineering, with at least 3 years of hands-on experience securing public cloud environments. A strong understanding of cloud security controls and proficiency with Terraform and automation/scripting is required.
Remote work allowed from home; hybrid option near Dexcom sites.
We create worlds that inspire friendship. Founded in 1991, we've been doing it for nearly 30 years. Come join us!
Proficiency in C/C++ application development and low-level debugging is required. Knowledge of Windows APIs and kernel internals is essential, with experience in anti-cheat or cybersecurity being a plus.
Remote possible; hybrid by location; pay varies by geography.
We create worlds that inspire friendship. Founded in 1991, we've been doing it for nearly 30 years. Come join us!
Experience leading security engineering programs for large-scale online services or games is required. Candidates should have deep knowledge of game security architectures and hands-on expertise with common attack vectors.
Hybrid in-office with policy-driven remote options; not fully remote.
Candidates should have 5+ years of technology development experience and hands-on experience with AWS and/or Azure services. A strong coding background in Java and/or Python is essential, along with knowledge of Agile methodologies.
Bachelor’s degree in Computer Science, Information Security, or equivalent experience is required. Candidates should have 5+ years of software engineering experience with an emphasis on security or developer platforms.
Remote policy not specified in the posting.
Good Leads The Way.
Candidates must have a bachelor's degree and at least 4 years of related experience, with a strong understanding of cloud infrastructure and security concepts. Proficiency in Python and knowledge of generative AI tools are also required.
The role requires experience in cloud or application security and knowledge of AI system architectures. Familiarity with threat modeling and security architecture for complex distributed systems is essential.
Good Leads The Way.
Candidates must have a bachelor's degree and at least 4 years of related experience, with a strong understanding of cloud infrastructure and security concepts. Proficiency in Python and knowledge of generative AI tools are also required.
Not remote; on-site in the United States required.
We create honest financial products that improve lives.
Candidates should have deep expertise in modern identity standards and hands-on experience with leading CIAM platforms. A strong software engineering background and a security-first mindset are essential for this position.
Remote-first, largely remote within the country; some roles office-based.
+123 more cybersecurity roles in Colombia
Tell us what you want. Get them in your inbox — no scrolling, no noise.
Describe your next role, cut the noise
A zero-noise alternative to job boards for remote startup jobs. Describe your next role once in plain language; Matcha reads every job description daily and emails you only the roles that actually fit. No UI to check, no notifications, no noise.
Matcha is a zero-noise alternative to job boards for remote startup jobs. Instead of scrolling through hundreds of irrelevant postings, you describe your next role once and Matcha reads every job description daily to surface only the roles that actually fit. Matches arrive in a single email, as soon as a relevant role is posted. No UI to check, no notifications, no noise. Because Matcha reads full job descriptions in plain language, there is no limit to what you can filter by: not just the usual dropdowns, but anything you can put into words.
Matcha surfaces fully remote jobs at startups from seed to series A, series B, etc. typically backed by top-tier VCs like a16z, Index Ventures, Y Combinator, Google Ventures, Sequoia, Accel, Khosla Ventures, etc. Roles span software engineering, design, marketing, sales, and more. Open to candidates in Europe, the US, Canada, the UK, Brazil, Latam, APAC, and worldwide.
Describe your next role, cut the noise