Information Security & Compliance Engineer for a Fast-Growing SaaS Platform Revolutionizing Online Fundraising - BEON.tech

Company name will be shared upon confirmed interview

Information Security & Compliance Engineer for a Fast-Growing SaaS Platform Revolutionizing Online Fundraising

California, Costa Mesa, United States (REMOTE)

A forward-thinking SaaS platform that’s revolutionizing the nonprofit industry. With a mission to disrupt outdated legacy systems, this company offers modern, cutting-edge fundraising and donor management tools that help nonprofits grow their revenue and amplify their impact. Backed by years of innovation, they provide organizations with everything they need to succeed in today’s fast-paced fundraising landscape. At the core of this company is a passionate team dedicated to making fundraising not only more efficient but also more enjoyable. Over the past 9 years, they’ve built a user-friendly platform designed specifically for nonprofit organizations, offering them the tools to raise more funds, manage donors, and drive meaningful change. They prioritize working closely with their customers to understand their needs and deliver solutions that make a real difference.

Salary up to:US$4,500

Timezone: GMT-8

Industries: Software Development, Fundraising, CRM, Marketing

Website:sensitive

In this role, you’ll take the lead in strengthening our security posture by driving PCI DSS Level 1 and SOC 2 Type II compliance, performing deep manual penetration testing, and building automated security workflows within our CI/CD pipelines. You’ll collaborate closely with engineering and external partners to validate, prioritize, and remediate vulnerabilities while maintaining core controls like access management, encryption, and logging. You’ll also oversee vulnerability and risk programs, support incident response, and ensure everything stays audit-ready. It’s a hands-on role where your technical expertise directly shapes how the company detects, prevents, and responds to threats.

4+ years in information security

Hands-on experience conducting both manual and automated penetration tests across applications, APIs, and cloud infrastructure.

Proficiency with common pentesting tools and frameworks such as Burp Suite Pro, Metasploit, Nmap, OWASP ZAP, sqlmap.

Strong understanding of cloud environments such as AWS, GCP, or Azure, including secure architecture and network security principles.

Experience integrating vulnerability scanning, penetration testing, and security validation into CI/CD pipelines.

Familiarity with SIEM platforms, endpoint protection tools, and compliance monitoring systems.

Ability to write and use scripts or internal tools (e.g., Python, Bash, PowerShell, JavaScript) to support offensive and defensive security tasks.

Exceptional attention to detail, especially when preparing audit evidence or evaluating complex security issues.

Every job requires English proficiency, being based in LATAM.

Bonus Skills

Industry-recognized security certifications such as OSCP, GPEN, GWAPT, CISSP, CISM, or PCI ISA.

Experience working with compliance automation, security orchestration (SOAR), or governance platforms.

Background in fintech, payments, or SaaS environments—especially those involving cardholder data or regulated data flows.

Familiarity with secure software development practices and threat modeling methodologies.

Experience collaborating with external auditors, QSA assessors, or third-party security firms.

Knowledge of advanced attack simulation frameworks or red-team tooling.

Interview process

Time to hire:2-3 weeks

BEON.TECH ASSESSMENT STAGE

Initial Interview

30 min

Technical Interview

1 hr

THE CLIENT STAGE

To be confirmed soon

TBD

We are committed to provide equal opportunities

BEON.tech connects the brightest Latin American talent with the most innovative and disruptive U.S. companies. You'll get access to a custom vetted pool of full-time, long-term, remote software jobs with compensation comparable to U.S.-based positions. To join BEON.tech is to be in a devs-first company, which means you are the priority when it comes to decision-making, client selection, and growth planning. Develop your career at the pace you deserve.

Trip to Headquarters in Buenos Aires

A US$ 1,000 welcome package to get you started with the right gear

USD compensation comparable to U.S.-based positions

English conversation club & workshops

Health insurance

Psychotherapy sessions

Flexible payments in crypto, wire transfer, Wise, PayPal, or Payoneer

Unlimited reskilling in Udemy, Education IT & O'Reilly

Internet service

AI Tools & Learning Program

Co-working spaces

Paid time off

Participate in weekly challenges and win quarterly prizes.Top performers earn US$750 (1st place) and US$350 (2nd place).

In this role, you'll be expected to take ownership of the following responsibilities as part of your day-to-day work:

Maintain and continuously enhance the company’s PCI DSS Level 1 and SOC 2 Type II compliance programs, ensuring all controls, documentation, and evidence remain audit- ready.

Conduct manual penetration tests across internal and external applications, APIs, and infrastructure to identify complex vulnerabilities not detectable by automated tools.

Design, build, and manage automated penetration testing and vulnerability-scanning pipelines, integrating them into CI/CD workflows for ongoing security validation.

Coordinate third-party penetration testing engagements, review findings, and partner with engineering teams to prioritize and drive remediation efforts.

Develop internal tools and scripts to simulate advanced attack techniques and improve detection and response capabilities.

Implement and maintain security controls related to network segmentation, access management, encryption, logging, and infrastructure-as-code deployments.

Oversee vulnerability management and patching programs, ensuring timely remediation of critical risks.

Create and maintain technical documentation, security policies, and evidence required for internal and external audits.

Conduct ongoing risk assessments, track corrective actions, and evaluate the security posture of third-party vendors.

Assist with incident response actions and forensic investigations when required.

Stay current on evolving security threats, compliance changes, and best practices, and apply them to strengthen the company’s security posture.

Year founded: 2015

Company size: 51-200

Company type: private

Key details to catch your eye

This innovative company has successfully raised $30 million to date, highlighting its strong financial foundation and commitment to transforming the nonprofit sector.

Thousands of nonprofits trust the company’s innovative, easy-to-use, secure fundraising platform.

It has been honored with the Innovative Nonprofit of the Year award at various industry events, showcasing its commitment to creativity and excellence in fundraising solutions.

Highlights

5 BEONers from Brazil and Honduras are already working on the project.

A VC-backed SaaS company in a strong growth phase, giving employees the chance to scale their careers alongside a fast-moving, well-funded organization rather than a legacy corporate structure.

A track record of driving industry-leading results for its clients, including 26% average online revenue growth and a 38% donation conversion rate, reflecting a product and team built to outperform.

Culture

Fosters a relaxed, fast-paced, and highly collaborative environment where teamwork is at the core of how things get done.

Encourages a strong sense of ownership, with engineers actively contributing ideas and supporting each other to move initiatives forward.

Promotes open communication and accessibility, with minimal hierarchy in day-to-day interactions.

Enables direct collaboration across all levels of the organization, making it easy to engage with leadership, including the CTO and CEO.

Cultivates a dynamic and supportive culture where feedback flows naturally and everyone works toward common goals.

Project's Core Tech Stack

Frontend

RReact

TTypeScript

Playwright

Jest

Backend

JJava

PostgreSQL

DevOps

AAmazon Web Services

AWS S3

AWS Lambda

Amazon CloudFront

AWS Route 53

AWS CloudWatch

Engineering staff

2 Frontend Engineers / 2 Backend Engineers / 3 QAs / 1 Mobile Engineer / 1 VP of Engineering / 1 CTO

I really like the culture here. We have a lot of freedom to bring up ideas, do research, make suggestions, and ask questions. People are very open to discussion, and what really matters at the end of the day is that things make sense and help us build a great product for our customers.

- Felipe from Brazil

Working on this team has been a great experience. I always feel supported when working with customers and handling issues. Communication is open, everyone is friendly, and when things get complex, the whole team jumps in. You’re never alone here—people truly have your back.

- Jimmy from Honduras

Information Security & Compliance Engineer for a Fast-Growing SaaS Platform Revolutionizing Online Fundraising

Requirements