Job Description

002H - Senior Cybersecurity Integration Engineer (Python/Data Ingestion) · Remote · LATAM

Get to Know Darwoft

At Darwoft, we build custom software solutions and partner with international companies to create high-impact digital products.

We are a Latin American technology company with a people-first culture, strong professional standards, and a long-term partnership mindset.

About the Project

We're partnering with an international cybersecurity product company developing an Identity Observability and Protection platform.

The platform continuously collects and analyzes identity activity, authentication events, security logs, network telemetry, and cloud data to help security teams identify blind spots, misconfigurations, suspicious access patterns, and identity-related threats.

To achieve this, the product integrates with complex enterprise environments, including identity providers, SIEM platforms, endpoint security tools, cloud infrastructure, SASE solutions, firewalls, secrets managers, and on-premise systems.

About the Role

We're looking for a Senior Cybersecurity Integration Engineer to design, build, and deploy the collectors and connectors that bring enterprise security data into the platform.

This is a hands-on engineering role combining software development, security integrations, data ingestion, cloud, and customer-facing solution delivery.

You'll work directly with engineering teams and enterprise customers to understand their security architecture, connect heterogeneous data sources, troubleshoot complex environments, and turn customer requirements into reliable and reusable product integrations.

This is not a SOC, penetration testing, or traditional analytics role. The focus is on building the software and data integrations that enable a cybersecurity platform to operate across enterprise environments.

What You'll Be Working On

• Design and develop production-grade security collectors, connectors, and data ingestion services.
• Build backend and integration components primarily using Python.
• Integrate identity, security, network, endpoint, and cloud platforms through APIs, SDKs, logs, event streams, buckets, or agents.
• Collect, process, normalize, and transport security events, authentication activity, alerts, network flows, and identity telemetry.
• Build reliable integrations capable of handling large volumes of operational security data.
• Work with REST APIs, authentication methods, service accounts, permissions, rate limits, retries, and error handling.
• Partner with enterprise customers during technical discovery, architecture design, onboarding, deployment, and production adoption.
• Troubleshoot issues involving APIs, networking, authentication, cloud infrastructure, Kubernetes, and distributed data pipelines.
• Collaborate with Product, Engineering, Customer Success, Sales Engineering, and Solution Architecture teams.
• Convert customer-specific implementations into reusable capabilities for the core platform.
• Contribute technical insights from real customer environments to the product roadmap.

What We're Looking For

• 10+ years of professional experience across Software Engineering, Integration Engineering, Data Engineering, Platform Engineering, Security Engineering, or related roles.
• Strong hands-on programming experience with Python.
• Experience building production-grade connectors, collectors, integration frameworks, backend services, or ingestion pipelines.
• Strong experience designing and consuming REST APIs.
• Experience processing logs, events, alerts, telemetry, network data, or other operational data sources.
• Knowledge of SQL and NoSQL databases.
• Production experience with at least one major cloud platform: AWS, Azure, or GCP.
• Experience with Docker, Kubernetes, Git, and CI/CD.
• Strong debugging and troubleshooting skills across distributed environments.
• Experience integrating complex third-party or enterprise platforms.
• Experience collaborating directly with customers or external technical stakeholders.
• Ability to navigate ambiguous requirements and independently drive solutions into production.
• Strong communication and stakeholder management skills.
• English proficiency at B2/C1 level.

Cybersecurity Experience

We're particularly interested in candidates with experience in one or more of these areas:

• Identity and Access Management — IAM.
• Identity Providers — IdPs.
• Identity Security or Identity Threat Detection and Response — ITDR.
• Security Information and Event Management — SIEM.
• Endpoint Detection and Response — EDR.
• SASE, Zero Trust, network security, firewalls, or VPNs.
• Cloud security and cloud identity.
• Privileged Access Management — PAM.
• Secrets management and non-human identities.
• Security telemetry, event correlation, or threat detection platforms.

Relevant technologies may include:

• Okta, Microsoft Entra ID, Active Directory, Duo, or Ping Identity.
• Splunk, Microsoft Sentinel, QRadar, Google SecOps, or similar SIEM platforms.
• CrowdStrike, Microsoft Defender, or similar endpoint security tools.
• Zscaler, Palo Alto, Fortinet, Cisco, Netskope, or similar network security platforms.
• CyberArk, HashiCorp Vault, or AWS Secrets Manager.
• AWS CloudTrail, CloudWatch, VPC Flow Logs, Kafka, S3, or other event and telemetry sources.

You don't need experience with every platform listed. What matters is having experience with enterprise security environments and the engineering ability to transform different security data sources into reliable, scalable integrations.

Nice to Have

• Experience with Go.
• Kafka or other streaming and large-scale event-processing technologies.
• Development of connector SDKs or reusable integration platforms.
• Experience working for a cybersecurity or enterprise SaaS product company.
• Background in Solution Architecture, Technical Consulting, Customer Engineering, or Forward Deployed Engineering.
• Knowledge of OAuth, tokens, service accounts, authorization, and machine identities.
• Experience with on-premise, hybrid, and multi-cloud enterprise environments.
• Exposure to AI/ML, LLMs, or AI-powered security products.

Opportunity Details

• Location: LATAM
• Work model: 100% remote
• Engagement: Full-time contractor
• Payment: USD
• English: B2/C1

What Darwoft Offers

• Contractor agreement with payment in USD.
• 100% remote work.
• Argentina's public holidays.
• English classes.
• Referral program.
• Access to learning platforms.

Explore this and other opportunities at:

www.darwoft.com/careers

Commitment and Availability

This role requires full-time dedication, with clear priority given to Darwoft projects during established working hours. It is not compatible with another full-time professional engagement.

Any additional professional activity must be disclosed in advance and must not interfere with the responsibilities or working hours of this position.