Senior SecOps Engineer - Remote Cloud & App Security

OpenKrill; United States; Remote; USD 140,000 - 200,000; Part time

Benefits offered by this job

Remote work flexibility

Stock options

Home office budget

Work trip budget

Paid time off

Job summary

Clutch is seeking a Senior SecOps Engineer to shape application and cloud security posture, embedded in engineering to drive secure-by-design practices, threat modeling, and proactive risk mitigation for our fintech platform.

You will advise on secure architecture, own vulnerability identification and remediation across services, cloud environments, tooling, and developer workflows, and help build a security‑minded engineering culture.

Qualifications

• 5+ years in software/security operations in fintech or high-growth startups.
• Deep knowledge of web app security, secure design, API hardening, threat modeling.
• Experience integrating security into CI/CD with SAST/DAST/SCA/IaC scanning.
• Familiarity with SOC 2, GLBA, PCI-DSS and cloud-native security (AWS, GCP).
• Strong coding background (Node.js, Python, Go) and ability to read secure code.
• Excellent communication and cross-functional collaboration.

Responsibilities

• Assess security posture and map high risks across services, cloud accounts, and pipelines.
• Embed with engineering teams to review secure design.
• Integrate SAST/DAST/SCA/IaC into CI/CD pipelines.
• Triage vulnerabilities and set baseline for secure coding and cloud hardening.
• Lead Secure SDLC design with gates and ownership at each stage.
• Establish cloud security controls including IAM least privilege and logging for threat detection.
• Build internal tooling for threat detection and cloud posture monitoring.

Skills

SecOps experience

Web application security

CI/CD security integration

Cloud security (AWS, GCP)

Strong coding (Node.js, Python, Go)

Tools

SAST

DAST

SCA

IaC scanning

Job description

Clutch is seeking a Senior SecOps Engineer to shape application and cloud security posture, embedded in engineering to drive secure-by-design practices, threat modeling, and proactive risk mitigation for our fintech platform.

You will advise on secure architecture, own vulnerability identification and remediation across services, cloud environments, tooling, and developer workflows, and help build a security‑minded engineering culture.