Senior SecOps Engineer

• Assess application and cloud security posture and map highest risks across services, cloud accounts, and pipelines
• Embed with engineering teams to review security-critical features and provide secure design guidance
• Integrate SAST, SCA, secret scanning, and IaC scanning into CI/CD pipelines
• Triage and remediate vulnerabilities and establish secure coding and cloud-hardening baselines
• Lead rollout of a Secure SDLC with actionable security gates and clear ownership
• Establish IAM least privilege, secrets management, and logging for threat detection
• Build tooling for threat detection, cloud posture monitoring, and vulnerability management
• Launch security playbooks and incident-response runbooks
• Develop and maintain secure libraries and frameworks, including authentication modules and input validators
• Drive cloud security improvements through policy as code, automated compliance checks, and drift detection
• Build and mentor a security champion network
• Threat model new services and cloud architecture changes with developers

• 5+ years of experience in software/application security
• Deep knowledge of web application security, secure software design, API hardening, and threat modeling
• Experience integrating SAST, DAST, SCA, and IaC scanning tools into CI/CD pipelines
• Familiarity with SOC 2, GLBA, and PCI-DSS compliance frameworks
• Familiarity with cloud-native security; AWS and GCP preferred
• Strong coding background in Node.js, Python, or Go
• Ability to read, understand, and debug code securely
• Excellent communication skills and ability to influence without authority
• Applicants must have necessary documentation and authorization to work in Brazil
• Clutch cannot provide sponsorship or assist with obtaining work permits

• Remote work from anywhere
• Twice-yearly off-sites
• 20 PTO days yearly
• National Holidays
• Stock options
• Dedicated home office setup budget
• Budget for work-related trips and co-working