This is not a job with a market title, a reporting line and a close date. It is the channel to leave a profile when no card on the list fits and you still want to work the human factor in cybersecurity with product, not with a course.
What we are looking at
Whalemate runs a Human Risk Management platform in LATAM: simulations, training by profile, analytics and an awareness agent. The team crosses engineering, security, content, customer success and go-to-market. A profile that comes in this way usually touches at least two of those tables, or one with depth (product only, account only, content only).
We do not publish a headcount or a “we are always hiring” with ghost roles. If this page is open, it is because we want to read profiles that do not fit a one-off posting. That does not guarantee an interview or a reply SLA.
How to write
In the form, say:
- What you did in recent roles that can be checked (product, account, content, security, ops).
- Which languages you actually work in: Spanish, English, Brazilian Portuguese. The product and the site are trilingual; this is not a passport requirement, it is a LATAM-context requirement.
- What you do not want to do. An unbounded “I do everything” does not help.
- A link to published work when it exists: repo, article, case, talk. If there is none, say so. We will not invent a portfolio for you.
You do not need a cover letter that copies the home manifesto. Ownership and speed are judged on the work, not on the adjective.
What this page is not
It is not an endless pipeline with no notice. We keep the profile for when a matching search opens. If a published role does fit, apply there: that card has the right scope, modality and channel.
It is not an offer. There is no benefits package with figures in this markdown. Whatever exists for a concrete role lives on that posting or in the written offer.
It is not a channel to request a product demo or a partnership. That goes to contact or demo.
Process if we move forward
We read the profile against real needs, not against an invented “nice to have” list. One or more conversations with whoever is hiring. Decision: offer or close. If it does not move, we say so. Fine detail (a challenge, timelines, compensation) is not fabricated on this page to look more process-driven than we are.
ISO/IEC 27001:2022 is the vendor certification. SOC 2 is not there. There is no endpoint agent. If your question is procurement, the Trust Center and the DPA are on the site; this application does not replace a tender.