← All roles

Senior SecOps Engineer

Clutch· Platform Engineering
Apply on company site
RemoteContractPosted 4d ago

About the role

Senior SecOps Engineer responsible for application and cloud security posture at Clutch, embedding security into engineering, driving secure design, threat modeling, and proactive risk mitigation in a fintech startup environment.

Responsibilities

  • Assess application and cloud security posture and map highest risks across services, cloud accounts, and pipelines.
  • Embed with engineering teams to review security critical features and provide guidance on secure design.
  • Integrate developer-friendly security tooling (SAST, SCA, secret scanning, IaC scanning) into CI/CD pipelines.
  • Triage and remediate early vulnerabilities and establish a baseline for secure coding and cloud hardening.
  • Lead design and rollout of a Secure SDLC with actionable security gates and clear ownership at each stage.
  • Establish cloud security controls, including IAM least privilege, secrets management, and logging for threat detection.
  • Build internal tooling to automate threat detection, cloud posture monitoring, and vulnerability management.
  • Launch an internal security playbook with incident response runbooks tailored to Clutch’s tech stack.
  • Develop and maintain secure libraries and frameworks used across engineering (e.g., auth modules, input validators).
  • Drive continuous cloud security improvements through policy as code, automated compliance checks, and drift detection.
  • Build and mentor a security champion network inside engineering teams.
  • Partner with developers to threat model new services and cloud architecture changes.

Qualifications

  • 5+ years of experience in software/application security, ideally in fast-growing startups or fintech environments.
  • Deep knowledge of web application security, secure software design, API hardening, and threat modeling.
  • Experience integrating security into CI/CD pipelines, including SAST, DAST, SCA, and IaC scanning tools.
  • Familiarity with common compliance frameworks (e.g., SOC 2, GLBA, PCI-DSS) and cloud-native security (AWS, GCP preferred).
  • Strong coding background (e.g., Node.js, Python, Go) and ability to read, understand, and debug code securely.
  • Excellent communication skills, with the ability to influence without authority and foster cross-functional collaboration.

Skills

Required:Security architecture and threat modelingCI/CD security toolingCloud security (AWS, GCP)ProgrammingCommunication & collaboration
Nice to have:Secure coding / secure libraries

Benefits

  • Remote Flexibility: Remote work from anywhere.
  • Unforgettable Off-Sites: Twice a year company retreats.
  • Paid Time Off and National Holidays: 20 PTO days yearly.
  • Stock Options: Equity in the company.
  • Home Office Setup: Budget for home office essentials.
  • Work Trip Budget: Budget for work-related trips and co-working.
Last updated Oct 22, 2026. Interested? Apply on the company site.

About Clutch

Modern Loan and Deposit Onboarding Experiences Solutions for Credit Unions

Digitize and simplify loan and deposit origination - with guided experiences, built-in intelligence, and real-time automation that works in-branch, online, and anywhere in between

LoanDepositOnboardingFintech
Company profileWebsite

More open roles at Clutch