Senior SecOps Engineer

Brazil, Remote. Posted 24 days ago

The role

You will shape and execute application security and cloud security posture. You will work embedded in engineering to drive secure by design practices, threat modeling, and risk mitigation across applications and cloud infrastructure.

What you will do

Assess application and cloud security posture and map risks.
Embed with engineering teams to review security critical features.
Integrate security tooling into CI/CD pipelines.
Triage and remediate vulnerabilities.
Lead the design and rollout of a Secure SDLC.
Establish cloud security controls including IAM and secrets management.
Build internal tooling to automate threat detection and vulnerability management.
Launch an internal security playbook with incident response runbooks.
Develop and maintain secure libraries and frameworks.
Drive continuous cloud security improvements through policy as code.

Required qualifications

5+ years of experience in software/application security.
Deep knowledge of web application security, secure software design, API hardening, and threat modeling.
Experience integrating security into CI/CD pipelines, including use of SAST, DAST, SCA, and IaC scanning tools.
Familiarity with common compliance frameworks (e.g., SOC 2, GLBA, PCI-DSS).
Strong coding background (e.g., Node.js, Python, Go).
Ability to read, understand, and debug code securely.
Excellent communication skills.

Nice to have

Benefits

Remote Flexibility
Twice a year off-sites
20 PTO days yearly
National Holidays
Stock Options
Home Office Setup budget
Work Trip Budget

Before you apply

Applicants must have the necessary documentation and authorization to work in the country where the job is located.
Clutch cannot provide sponsorship or assist with obtaining work permits for this role.
Please approach interviews without the use of AI tools.

About the company

Clutch is a vertical SaaS company backed by Andreessen Horowitz (A16z) that develops software to turn Credit Unions into FinTech lenders.