Security Engineer

Security Engineer About Solstice Analytics Solstice Analytics is a vertically integrated Earth Observation company that designs, manufactures, and operates satellite systems, delivering decision-grade insights at scale to government and commercial customers. We build space systems end-to-end, from satellite design and manufacturing to launch and on-orbit operations, giving us the ability to deploy quickly, operate reliably, and support persistent monitoring across regions and priority areas. Our approach moves customers beyond one-off imagery toward continuous awareness and alert-driven decision-making, with flexible pathways that can evolve from managed monitoring to full satellite ownership and sovereign control. Our technology supports a wide range of use cases across climate monitoring, agriculture, energy, infrastructure, defense and intelligence, helping organizations detect change, manage risk, and plan with confidence. With a team distributed across five countries, Solstice Analytics brings together expertise in satellite engineering, software development, data science, manufacturing, operations, and go-to-market. We’re a group of purpose-driven builders who value ownership, curiosity, and execution—and who work with humility, honesty, and empathy. About the Team The Information Security Team is in charge of identifying, evaluating, reporting and mitigating risks to acceptable levels that meet compliance and regulatory requirements. From corporate systems and users’ security, creating security awareness programs, working with development teams to securely design features to enable new markets and products, to incident detection and remediation, the team maintains the corporate wide information security program to ensure that information assets are adequately protected, aligned with the company vision, mission, culture and business objectives. About the Position For this role in the Information Security Team, we are looking for someone who is passionate about designing, implementing and testing security controls to secure our systems and users. The role involves understanding the latest trends in infrastructure and systems security with regards to identity driven, context aware access and using that knowledge to enhance our security. This person will closely work with the VP of Information Security and CISO helping improve our Information Security Program, in particular the processes, standards and tools related to Systems and Users. The ideal candidate is someone looking to work in a dynamic team and to share their knowledge with peers. Location Remote work from anywhere between UTC-5 and UTC+3 time zones. Office locations include Buenos Aires, Cordoba, Montevideo, Barcelona. Responsibilities As a Security Engineer, you will: Endpoint & Systems Security: Manage, monitor, and enforce security policies across our global, remote workforce endpoints. Identity & Access Management (IAM): Oversee user access controls, configure single sign-on (SSO) configurations, and manage user lifecycles across enterprise software and cloud environments. Network & Infrastructure Defense: Partner with IT networks and engineering infrastructure teams to implement secure boundary defenses, segmentation strategies, and monitoring. Penetration Testing & Assessment Coordination: Serve as the primary technical point of contact for external penetration testing vendors. Own the end-to-end lifecycle of security assessments: define rules of engagement, establish testing scopes, facilitate environment access, and translate final assessment findings into actionable remediation workflows for internal teams. Third-Party Vendor Risk Management: Perform thorough security due diligence, risk modeling, and operational compliance reviews on all prospective vendors and software systems. AI Technology Risk Mitigation: Proactively research and assess the security risks of deployed and incoming AI/LLM technologies. Establish configuration guardrails to prevent corporate data poisoning, data leakage, and insecure plugin executions. Vulnerability & Patch Management: Coordinate with IT teams to identify, prioritize, track, and patch vulnerabilities across endpoints and system architecture. Incident Triage & Response: Act as a support responder for the SIRT team on infrastructure and endpoint alerts, isolating threats and performing root-cause analyses. Security Standard Procedures: Design, implement, and maintain security standards and procedures to support the deployment and isolation of network-connected devices. About you Skills and Experience At least 5 years of professional experience in security engineering, infrastructure security, or system administration within a highly remote or distributed corporate layout. Strong core competency in securing operating systems (macOS, Windows, Linux) and administrative exposure to cloud identity providers (e.g., Okta, Entra ID, Google Workspace). Demonstrated experience reviewing vulnerability data or penetration test reports