Security Engineer
Company Description
At Fonoa, we are transforming how digital-first companies stay tax compliant. We provide simple and modular API solutions that easily integrate into any existing workflow. Through our technology-first approach, we reduce manual processes, increase compliance, and lower operational costs when transacting and scaling internationally.
We are solving one of the largest yet unsolved problems in global e-commerce. Our tax automation software enables companies such as Uber, Zoom, Booking.com, Squarespace, and Rappi to expand their international offerings more quickly and remain tax-compliant.
Position Overview
As Fonoa continues to scale globally, we are looking for a Security Engineer to take ownership of our internal security posture and help us move from foundational security practices to a more mature, proactive, and automated security function.
This role will focus on building detection and incident response capabilities, improving visibility across our systems, and embedding security best practices across IT and the wider organisation. You will work closely with IT Support, Engineering, Legal, People Ops, and other teams to ensure Fonoa’s systems, data, and people are protected.
This is a hands-on role for someone who enjoys building security programs from the ground up, taking initiative, and solving problems at their root, not just reacting to alerts or tickets.
Key Responsibilities
Security Foundations
Own and continuously improve Fonoa’s information and cybersecurity posture across endpoints, identities, and SaaS tools
Define, document, and maintain security policies, standards, and controls
Ensure strong access controls, encryption, and secure configuration baselines
Detection & Incident Response
Design, build, and maintain an end-to-end incident response framework
Develop detection and alerting capabilities across identity, endpoint, and SaaS environments
Lead or coordinate security incidents, including root cause analysis and post-incident reviews
Participation in the on-call rotation schedule
Security Automation
Implement and manage security automation and SOAR-style workflows
Reduce manual security tasks through automation and repeatable playbooks
Improve response times and consistency through tooling and process improvements
Collaboration & Enablement
Partner closely with IT Support on endpoint, device, and access security
Work with other engineering functions to support secure tooling, integrations, and practices
Support compliance activities, audits, and customer security questionnaires
Act as a security subject-matter expert for internal stakeholders
Qualifications
2+ years of hands-on experience in Information Security, Cyber Security, or a closely related role
Experience designing, implementing, or operating incident response processes
Familiarity with security detection, monitoring, and response tooling
Strong understanding of:
Identity and access management
Endpoint security
SaaS security best practices
Ability to work independently, take initiative, and operate in ambiguous environments
Bonus Points If You Have
Experience with security automation or SOAR tools
Scripting or automation experience (Python, Go, Shell)
Experience supporting compliance frameworks or audits
What Success Looks Like
A documented, tested, and operational incident response process is in place
Improved visibility into security risks, assets, and access with a centralised alerting system
Reduced manual security work through automation
Security is seen as a proactive, trusted partner across the company
Why Join Us
Opportunity to build and shape security at a fast-growing, global startup
High ownership and impact in a critical function
Work with a collaborative, motivated, and experienced team
Competitive compensation and benefits
Flexible working arrangements
If you’re passionate about building security the right way, enjoy taking ownership, and want to help scale a modern, security-conscious organisation, we’d love to hear from you.
As part of the recruitment process at Fonoa, we process your personal data in accordance with our Privacy Notice for Job Applicants. This notice explains how and why your data is collected and used, and how you can contact us if you have any concerns.