DevSecOps Engineer

What will you do

• Manage security protocols across all platforms to prevent unauthorized access.
• Analyze and respond to security threats in real-time.
• Work with Engineering and Data Leadership to improve security strategies.
• Lead and participate in large-scale technical projects focused on security enhancement.
• Identify and address security loopholes proactively.
• Respond to security incidents quickly, analyze them, and prepare incident reports.
• Ensure security is integrated during the development phase (CI/CD)Assist in compliance audits for SOC 2 and HIPAA.
• Explore and implement advanced security tools and frameworks.
• Promote security awareness within the team.

What you bring

• Hands-on experience as a DevSecOps engineer with extensive knowledge in network security, including Firewalls, WAF, IDP, application security and more.
• Proficient with SIEM, Log Aggregations, Vulnerability Management, and Security Monitoring Tools such as Wiz.io.
• 2-3 years of experience in with cloud platforms like AWS/GCP/Azure
• Experience with security frameworks, and tools such as Terraform.
• Solid understanding of Web Servers, Networking, Load Balancers, Nginx, etc.
• Proficiency in scripting languages like Bash, Python or equivalent.
Advantages:
• Experience with Kubernetes.
• Familiarity with SOC 2 and HIPAA compliance.
• Experience in developing server-side applications (NodeJS).
• Familiarity with monitoring tools like Splunk and NewRelic.

What we offer

• An opportunity to positively affect the lives of thousands of patients
• A flexible lifestyle that fits the modern work-life balance
• A chance to join a high-growth company at an early stage
• Highly skilled co-workers with whom you can grow your skill set
• Be a part of a team that revolutionizes medical payments in ways never seen before
• The ability to impact company values and culture in a collaborative environment - we value all comments and suggestions
• Competitive pay, stock options