Senior SecOps Engineer

Speedrun Talent Network; Brasilien; Remote; BRL 200.000 - 300.000; Vollzeit

Benefits dieser Stelle

Remote flexibility

Off-sites twice a year

PTO and holidays

Stock options

Home office budget

Work trip budget

Zusammenfassung

Clutch is seeking a Senior SecOps Engineer to shape application and cloud security posture. You will work embedded in engineering to promote secure-by-design practices, threat modeling, and proactive risk mitigation across fintech apps and cloud infra.

You will advise on secure architecture, own vulnerability remediation, and drive secure coding standards while embedding security across pipelines and developer workflows.

Qualifikationen

• 5+ years in software/application security in startups or fintech.
• Deep knowledge of web application security, secure software design, API hardening, and threat modeling.
• Experience integrating security into CI/CD pipelines, including SAST/DAST/SCA and IaC scanning.
• Familiarity with SOC 2, GLBA, PCI-DSS and cloud-native security (AWS, GCP).
• Strong coding background (Node.js, Python, Go) and ability to read, analyze, and secure code.
• Excellent communication skills with cross-functional collaboration.

Aufgaben

• Assess application and cloud security posture and map top risks.
• Embed with engineering to review secure design and guidance.
• Integrate security tooling into CI/CD pipelines.
• Triage vulnerabilities and set a baseline for secure coding and cloud hardening.
• Lead the design and rollout of a Secure SDLC with security gates and ownership.
• Establish cloud security controls including IAM least privilege and logging.
• Build internal tooling for threat detection and cloud posture monitoring.
• Launch an internal security playbook with incident response runbooks.

Kenntnisse

Security engineering

Threat modeling

CI/CD security tooling

Cloud security (AWS/GCP)

Secure coding (Node.js, Python, Go)

Tools

SAST

DAST

SCA

IaC scanning

Jobbeschreibung

About the Role

As a Senior SecOps Engineer at Clutch, you will shape and execute our application security and cloud security posture. You will work embedded in engineering, driving secure by design practices, threat modeling, and proactive risk mitigation across our applications and cloud infrastructure. This is a hands‑on role for someone who loves building secure systems and influencing security culture in a fast‑paced fintech startup.

You will act as a key advisor on secure architecture. You will own the work of identifying, fixing, and preventing vulnerabilities across our services, cloud environments, tooling, and developer workflows.

About the Team

The SecOps team is a focused group responsible for application security and cloud security across the product. We help Clutch scale securely and efficiently.

• We partner closely with product engineering to embed security throughout the SDLC.
• We value pragmatism, ownership, and curiosity. We always ask: “How can we make this safer and faster?”
• We are building a security first engineering culture that enables teams to move fast and responsibly, without slowing them down.

What You’ll Do

Within 1 months, you will:

• Assess our application and cloud security posture, and map the highest risks across services, cloud accounts, and pipelines.
• Embed with engineering teams to review security critical features and give practical guidance on secure design.
• Integrate developer friendly security tooling (SAST, SCA, secret scanning, IaC scanning) into our CI/CD pipelines.
• Triage and remediate early vulnerabilities, and set a baseline for secure coding and cloud hardening.

Within 3 months, you will:

• Lead the design and rollout of a Secure SDLC with actionable security gates and clear ownership at each stage.
• Establish cloud security controls, including IAM least privilege, secrets management, and logging for threat detection.
• Build internal tooling to automate threat detection, cloud posture monitoring, and vulnerability management.
• Launch an internal security playbook with incident response runbooks tailored to Clutch’s tech stack.

Within 6 months, you will:

• Develop and maintain secure libraries and frameworks used across engineering, such as auth modules and input validators.
• Drive continuous cloud security improvements through policy as code, automated compliance checks, and drift detection.
• Build and mentor a security champion network inside engineering teams.
• Partner with developers to threat model new services and cloud architecture changes.

What You’ll Bring

• 5+ years of experience in software/application security, ideally in fast‑growing startups or fintech environments.
• Deep knowledge of web application security, secure software design, API hardening, and threat modeling.
• Experience integrating security into CI/CD pipelines, including use of SAST, DAST, SCA, and IaC scanning tools.
• Familiarity with common compliance frameworks (e.g., SOC 2, GLBA, PCI‑DSS) and cloud‑native security (AWS, GCP preferred).
• Strong coding background (e.g., Node.js, Python, Go) and ability to read, understand, and debug code securely.
• Excellent communication skills, with the ability to influence without authority and foster cross‑functional collaboration.

What’s In It For You?

• Remote Flexibility: Enjoy the freedom of remote work from anywhere, balancing life and career seamlessly.
• Unforgettable Off‑Sites: Twice a year, bond with colleagues in exciting destinations, fostering teamwork and fresh ideas.
• Paid Time Off and National Holidays: Enjoy 20 PTO days yearly and the National Holidays for relaxation and rejuvenation.
• Stock Options: Joining us means having a stake in our success, so you'll receive stock options as part of your compensation package.
• Home Office Setup: Create your ideal workspace with a dedicated budget for home office essentials.
• Work Trip Budget: Grow personally and professionally with a budget for work‑related trips and co‑working.

About Us

Clutch is a revolutionary vertical SaaS company, proudly backed by Andreessen Horowitz (A16z), aimed at revolutionizing the way Credit Unions engage and change the lives of their members. As a champion of financial well‑being, we address the urgent need for affordable lending solutions in an era where the average American grapples with over $155,000 in household debt. Unlike traditional financial institutions, Clutch develops software to turn Credit Unions into FinTech lenders and leverage their balance sheets to responsibly lend to over 130M Americans. Our mission extends beyond mere financial transactions; we strive to fundamentally enhance the way credit unions interact with their members. By integrating cutting‑edge technologies and user‑centric designs, we help credit unions provide seamless digital experiences that are on par with leading tech companies. This approach not only preserves but revitalizes the longstanding tradition of community and member‑focused service inherent to credit unions.

Please note: This position is offered on a contractor basis. Applicants must have the necessary documentation and authorization to work in the country where the job is located. Clutch cannot provide sponsorship or assist with obtaining work permits for this role.

A Note About AI at Clutch We love AI. We use it often and encourage our team to creatively and effectively leverage AI tools in their work. If you join Clutch, we hope you'll bring the same enthusiasm for exploring how AI can amplify impact, productivity, and innovation.

That said, during the interview process, we want to hear your thoughts. Please approach interviews without the use of AI tools—our goal is to get to know how you think, solve problems, and communicate. Once you're in the seat, bring on the prompts!