Senior Security Operations Engineer at Clutch at Clutch

About the Role

As a Senior SecOps Engineer at Clutch, you will be instrumental in shaping and executing our application security and cloud security posture. This is a hands-on opportunity where you will integrate deeply with engineering teams to drive secure by design practices, conduct threat modeling, and proactively mitigate risks across our applications and cloud infrastructure. You will serve as a key advisor on secure architecture, owning the process of identifying, fixing, and preventing vulnerabilities across our services, cloud environments, tooling, and developer workflows. This role is ideal for someone passionate about building secure systems and influencing security culture within a fast paced fintech startup.

About the Team

The SecOps team is dedicated to overseeing application security and cloud security for our product suite. We enable Clutch to scale securely and efficiently by:

• Partnering closely with product engineering to embed security throughout the entire Software Development Life Cycle (SDLC).
• Valuing pragmatism, strong ownership, and intellectual curiosity. We always seek to improve security while maintaining speed.
• Building a security first engineering culture that allows teams to move fast and responsibly without unnecessary roadblocks.

What You Will Do

Within the first 1 month, you will:

• Assess our current application and cloud security posture, mapping the highest risks across services, cloud accounts, and pipelines.
• Embed with engineering teams to review security critical features and provide practical guidance on secure design.
• Integrate developer friendly security tooling, such as SAST, SCA, secret scanning, and IaC scanning, into our CI/CD pipelines.
• Triage and remediate early vulnerabilities, while setting a baseline for secure coding and cloud hardening.

Within 3 months, you will:

• Lead the design and deployment of a Secure SDLC, establishing actionable security gates and clear ownership at every stage.
• Establish robust cloud security controls, including IAM least privilege, secrets management, and logging necessary for threat detection.
• Build internal tooling to automate threat detection, cloud posture monitoring, and vulnerability management.
• Launch an internal security playbook complete with incident response runbooks tailored to Clutch’s tech stack.

Within 6 months, you will:

• Develop and maintain secure libraries and frameworks used company-wide, such as authentication modules and input validators.
• Drive ongoing cloud security improvements through policy as code, automated compliance checks, and drift detection.
• Build and mentor a security champion network within engineering teams.
• Partner with developers to threat model new services and cloud architecture changes.

What You Will Bring

• 5 or more years of experience in software or application security, preferably within fast growing startups or fintech settings.
• In-depth knowledge of web application security, secure software design, API hardening, and threat modeling.
• Proven experience integrating security practices into CI/CD pipelines, including using SAST, DAST, SCA, and IaC scanning tools.
• Familiarity with common compliance frameworks (e.g., SOC 2, GLBA, PCI-DSS) and cloud native security platforms (AWS, GCP preferred).
• A strong coding background (e.g., Node.js, Python, Go) and the ability to read, understand, and debug code securely.
• Excellent communication skills, with the proven ability to influence peers without direct authority and foster cross functional collaboration.

Please note that this role is designed to evolve based on our business needs, so we value flexibility and adaptability.

What's In It For You?

• Remote Flexibility: Benefit from the freedom of remote work from anywhere, allowing you to seamlessly balance your career and life.
• Unforgettable Off-Sites: Join us twice a year for off sites in exciting destinations to strengthen teamwork and generate fresh ideas.
• Time Off and Holidays: Enjoy 20 PTO days yearly plus all national holidays for relaxation and rejuvenation.
• Stock Options: Becoming part of the Clutch team means having a stake in our success through stock options in your compensation package.
• Home Office Setup: Receive a dedicated budget to set up your ideal home office workspace.
• Work Trip Budget: Grow both personally and professionally with a budget allocated for work related trips and co working spaces.

About Us

Clutch is a revolutionary vertical SaaS company, proudly backed by Andreessen Horowitz (A16z). Our mission is to transform the way Credit Unions engage with and change the lives of their members. We champion financial well being by tackling the critical need for affordable lending solutions in an era where the average American faces over $155,000 in household debt. Unlike traditional financial institutions, Clutch develops software that empowers Credit Unions to become FinTech lenders, leveraging their balance sheets to responsibly lend to over 130 million Americans. Our purpose goes beyond mere transactions; we aim to fundamentally enhance the interaction credit unions have with their members. By integrating cutting edge technologies and user centric designs, we enable credit unions to provide seamless digital experiences comparable to leading tech companies. This approach not only preserves but reinvigorates the enduring tradition of community and member focused service inherent to credit unions.

Important Note: This position is offered on a contractor basis. Applicants must possess the necessary documentation and authorization to work in the country where the job is located. Clutch cannot provide sponsorship or assist in obtaining work permits for this role.

A Note About AI at Clutch: We enthusiastically embrace AI, utilizing it frequently and encouraging our team to creatively and effectively leverage AI tools. If you join Clutch, we hope you bring that same enthusiasm for exploring how AI can amplify impact, productivity, and innovation. However, during the interview process, we want to hear your unfiltered thoughts. Please approach interviews without using AI tools, as our primary goal is to understand your thought process, problem solving skills, and communication style. Once you are on the team, bring on the prompts!