Senior SecOps Engineer

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Evaluate the security posture of applications and cloud environments while identifying the most significant risks across various services, cloud accounts, and pipelines.

• Collaborate closely with engineering teams to assess security-critical features and offer guidance on secure design practices.

• Incorporate SAST, SCA, secret scanning, and IaC scanning into CI/CD processes.

• Identify, prioritize, and resolve vulnerabilities while establishing secure coding standards and cloud-hardening practices.

• Spearhead the implementation of a Secure Software Development Life Cycle (SDLC) with actionable security checkpoints and defined ownership.

• Implement IAM least privilege principles, manage secrets, and set up logging for effective threat detection.

• Develop tools for threat detection, monitoring cloud posture, and managing vulnerabilities.

• Initiate security playbooks and incident-response procedures.

• Create and maintain secure libraries and frameworks, including authentication modules and input validation tools.

• Propel cloud security enhancements via policy as code, automated compliance assessments, and drift detection mechanisms.

• Establish and mentor a network of security champions.

• Conduct threat modeling for new services and modifications in cloud architecture alongside developers.

⛳️ Requirements

• Over 5 years of experience in software and application security.

• Extensive knowledge of web application security, secure software design principles, API hardening, and threat modeling.

• Proven experience in integrating SAST, DAST, SCA, and IaC scanning tools into CI/CD workflows.

• Understanding of compliance frameworks such as SOC 2, GLBA, and PCI-DSS.

• Familiarity with cloud-native security, with a preference for AWS and GCP environments.

• Strong programming skills in Node.js, Python, or Go.

• Ability to securely read, comprehend, and debug code.

• Exceptional communication abilities and capacity to influence without direct authority.

• Candidates must possess the required documentation and authorization to work in Brazil.

• Clutch is unable to provide sponsorship or assist with work permit applications.

🏝️ Benefits

• Work remotely from any location.

• Participate in off-site events twice a year.

• Enjoy 20 paid time off (PTO) days annually.

• Observe national holidays.

• Receive stock options.

• Access a dedicated budget for home office setup.

• Benefit from a budget for work-related travel and co-working spaces.