Senior SecOps Engineer

Clutch

. Assess application and cloud security posture and map highest risks across services, cloud accounts, and pipelines .

Posted 10/21/2026contractRemote • BrazilSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application and cloud security, with a strong focus on secure software design, threat modeling, and vulnerability management. Proficient in integrating security tools into CI/CD pipelines and establishing secure coding practices.

Highest-signal resume keywords

Application SecuritySecure Software DesignSAST IntegrationCloud SecurityThreat Modeling

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Web Application SecurityAPI HardeningNode.jsPythonGoVulnerability ManagementSecure CodingCloud-HardeningPolicy as CodeAutomated Compliance Checks

Soft Skills

Excellent CommunicationInfluencing Without Authority

Tools & Technologies

CI/CD PipelinesSAST ToolsDAST ToolsSCA ToolsIaC Scanning ToolsIAMSecrets ManagementThreat Detection ToolsLogging ToolsSecure Libraries

Industry Keywords

SOC 2GLBAPCI-DSSCloud-Native SecurityAWSGCP

Tech Stack

Tools & technologies

AWSCloudGoogle Cloud PlatformJavaScriptNode.jsPythonSDLCGo

About the role

Key responsibilities & impact

Assess application and cloud security posture and map highest risks across services, cloud accounts, and pipelines
Embed with engineering teams to review security-critical features and provide secure design guidance
Integrate SAST, SCA, secret scanning, and IaC scanning into CI/CD pipelines
Triage and remediate vulnerabilities and establish secure coding and cloud-hardening baselines
Lead rollout of a Secure SDLC with actionable security gates and clear ownership
Establish IAM least privilege, secrets management, and logging for threat detection
Build tooling for threat detection, cloud posture monitoring, and vulnerability management
Launch security playbooks and incident-response runbooks
Develop and maintain secure libraries and frameworks, including authentication modules and input validators
Drive cloud security improvements through policy as code, automated compliance checks, and drift detection
Build and mentor a security champion network
Threat model new services and cloud architecture changes with developers

Requirements

What you’ll need

5+ years of experience in software/application security
Deep knowledge of web application security, secure software design, API hardening, and threat modeling
Experience integrating SAST, DAST, SCA, and IaC scanning tools into CI/CD pipelines
Familiarity with SOC 2, GLBA, and PCI-DSS compliance frameworks
Familiarity with cloud-native security; AWS and GCP preferred
Strong coding background in Node.js, Python, or Go
Ability to read, understand, and debug code securely
Excellent communication skills and ability to influence without authority
Applicants must have necessary documentation and authorization to work in Brazil
Clutch cannot provide sponsorship or assist with obtaining work permits

Benefits

Comp & perks

Remote work from anywhere
Twice-yearly off-sites
20 PTO days yearly
National Holidays
Stock options
Dedicated home office setup budget
Budget for work-related trips and co-working