DevSecOps Engineer

Job Summary

Seeking a passionate DevSecOps Engineer, the full-time remote position will focus on enhancing application security, integrating best practices into the development lifecycle, and automating security processes to protect sensitive health information.

Key responsibilities

• Improve security design by assessing current controls in GCP and Kubernetes, identifying areas for enhancement
• Champion secure development practices by collaborating with Engineering and Product teams to embed security early in the software lifecycle
• Build and automate security tooling to streamline vulnerability detection, remediation, and compliance verification

Required qualifications

• 5-7+ years of experience in application security, with at least 2 years in a high-growth startup or similar environment
• Practical experience securing cloud-native applications, particularly in Kubernetes and GCP
• Strong understanding of networking concepts, identity management (IAM), and common web application vulnerabilities
• Hands-on experience with application security practices, including secure coding and vulnerability management
• Proficiency in Infrastructure as Code (IaC) tools, specifically Terraform, and development experience with Go and/or Python