The SecOps Engineer owns security end-to-end at Nauta: client data protection, secrets handling: including the connector standard’s auth patterns, in partnership with the Integrations Lead: access control, and compliance readiness. This is hands-on operational security, not theoretical frameworks.
Reporting to the Head of DevOps y SecOps, this role works closely with DevOps, Engineering, and HR to ensure people, systems, and permissions are correctly aligned.
What you’ll do
- Own system access management across infrastructure, tools, and platforms: grant, review, and revoke permissions correctly
- Own secrets handling and auth patterns, including the connector standard’s authentication requirements, in partnership with the Integrations Lead
- Support internal and external audits (SOC-related processes) and keep evidence and documentation audit-ready
- Work closely with the Head of DevOps y SecOps on infrastructure security best practices and risk reduction
- Support incident response and remediation when a security issue is identified
- Define and improve security processes and guidelines, automating checks and controls where possible
- Partner with HR on access mapping by role for onboarding and offboarding
Who you are
- Experience in security, DevSecOps, or infrastructure security roles
- Strong understanding of access management, compliance, and audit processes
- Comfortable working with technical teams and infrastructure environments
- Structured, detail-oriented, and reliable
- Strong sense of ownership and accountability
- Able to apply security pragmatically without slowing teams down
Nice to have
- Experience with SOC 2 or similar compliance frameworks
- Familiarity with secrets management tooling (Vault, AWS Secrets Manager, or similar)
- Experience securing AI/LLM-powered production systems
About Nauta
Nauta is your AI partner, powered by an AI operational brain. Nauta reads how your company works: your email, your documents, your rules. Then AI agents do the daily work, like reading every document, checking invoices and chasing what’s missing. You stay in control.