CyberSecurity Automation Engineer

We are a leading financial platform, building the future of payments, shopping, and banking—a world where consumers and merchants can transact effortlessly, grow together and where we create abundance and generate pride in them. Today, we serve over 2 million customers and partner with more than 20,000 merchants, making Addi Colombia’s fastest-growing marketplace.

We provide banking solutions (deposits, payments, unsecured credit) and commerce services (e-commerce, marketing) using state-of-the-art technology, bridging the financial gap for millions and redefining how people experience financial freedom. As the country’s leading Buy Now, Pay Later provider, we have secured regulatory approval to operate as a bank, unlocking even greater opportunities for our customers. In the past year, we have also achieved profitability, reinforcing the strength of our business model and our ability to scale sustainably.

Our mission has earned the trust of world-class investors, including Andreessen Horowitz, Architect Capital, GIC, Goldman Sachs, Greycroft, Monashees, Notable Capital, Quona Capital, Union Square Ventures, Victory Park Capital, and more, who back our vision for the future. With their support, we are not just growing—we are transforming Latin America’s financial ecosystem and shaping the next generation to shop, pay, and bank in Colombia.

But what truly sets us apart is how we build. We are a conscious company, driven by deep experience in scaling technology, services and products, and we live by our values every day.

This is where you come in. Below, you’ll find what this role is all about—the impact you’ll drive, the challenges you’ll tackle, and what it takes to thrive at Addi. If you’re ready to be part of something big, keep reading.

Design, build, and operate security automations that scale core security and identity processes across the organization, reducing manual effort, improving consistency, and enabling secure, efficient operations at scale.

• →

  Design and implement end-to-end automated onboarding and offboarding workflows integrated with IAM, HRIS, and core SaaS platforms (e.g., Google Workspace, Slack, AWS, GitHub, NetSuite), ensuring 100% of joiners and leavers are processed through automation by the end of Q2 2026, reducing manual steps by ≥80% and eliminating access-related delays and orphaned accounts.

• →

  Automate the vulnerability management lifecycle, including ingestion, enrichment, deduplication, prioritization, and ticket creation across scanning and tracking tools, ensuring ≥95% of critical vulnerabilities are automatically triaged and assigned, reducing manual handling by ≥70%, and improving remediation SLAs through secure, access-controlled automation by the end of 2026.

• →

  Build and maintain IAM and access management automations for provisioning, role-based access, and Just-In-Time (JIT) workflows, ensuring all access changes are executed automatically with full auditability, reducing standing privileged access, and decreasing manual IAM work by ≥60% by the end of Q3 2026.

• →

  Automate administrative security controls across cloud, SaaS, and identity platforms, including policy enforcement, configuration checks, and access reviews, reducing manual administrative actions by ≥60% and improving consistency and compliance of security configurations across environments.

• →

  Develop and operate SOAR and incident response automations for common security events and alerts, automating ≥30% of repetitive response actions, reducing Mean Time to Respond (MTTR) by ≥50% for defined use cases, and improving consistency and reliability of incident response execution.

• Proven Experience in Security Automation & Engineering

  • Demonstrated experience designing, building, and maintaining automation for security and identity workflows in cloud-first environments.

  • Strong programming and scripting skills (e.g., Python, Bash, JavaScript) used to automate APIs, workflows, and integrations.

  • Experience operating automation in production environments with reliability, observability, and error handling.

• Demonstrates Strong Capability in Identity & Access Management Automation

  • Hands-on experience automating IAM workflows, including user lifecycle management, role-based access control, and Just-In-Time access.

  • Familiarity with IAM systems and identity providers, and integrating them with HRIS and SaaS platforms.

  • Ability to enforce least-privilege access and reduce standing privileges through automation.

• Possesses Solid Expertise in Vulnerability Management Automation

  • Experience automating vulnerability ingestion, enrichment, prioritization, and ticketing across multiple security tools.

  • Strong understanding of vulnerability risk context, including severity, exploitability, and asset criticality.

  • Ability to design secure automations with appropriate access controls for sensitive security data.

• Track Record of Delivering SOAR & Incident Response Automation

  • Experience designing and maintaining SOAR playbooks to automate detection enrichment and response actions.

  • Ability to reduce manual incident response effort through reliable, repeatable automation.

  • Familiarity with integrating automation into SIEM, XDR, and alerting platforms.

• Experienced in Secure Systems Integration & Operational Excellence

  • Proven ability to integrate APIs across cloud, SaaS, and security platforms reliably and securely.

  • Demonstrates strong operational discipline, including logging, monitoring, documentation, and version control of automations.

  • Proactively identifies opportunities to replace manual processes with scalable, automated solutions.

We believe in a fast, transparent, and engaging hiring experience that allows both you and us to determine if there's a great fit. Here’s what our process looks like:

• Step 1: People Interview (30 min)
  A conversation with a recruiter or hiring manager to get to know you, your experience, and what you're looking for. We’ll also share more about Addi, our culture, and the role.

• Step 2: Initial Interview (60 min)
  A more in-depth conversation with our Engineering Manager, where we explore your skills, experience, and problem-solving approach. We want to understand how you think and work.

• Step 3: Deep Dive Interview (60 min)
  You'll meet future colleagues and cross-functional team members to get a feel for how we work together. We’re looking for strong contributors and cultural fits, so bring your questions, too!

• Step 4: Case Study (3-5 Days)
  You may receive a real-world challenge or case study to complete. This is a chance to showcase your expertise and how you approach key problems relevant to the role.

• Step 5: Co-Founder Interview
  If there’s a strong match, you’ll have a final conversation with our Founder to align on expectations, cultural fit and ensure mutual excitement. From there, we’ll move quickly to an offer and discuss next steps.

We value efficiency and respect for your time, so we aim to complete the process as quickly as possible. Our goal is to make this experience insightful and exciting for you, just as much as it is for us. Regardless of the outcome, we are committed to always providing feedback, ensuring that you walk away with valuable insights from your experience with us.