DevSecOps Engineer
Virta Health · Remote · Remote ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Fully remote (US)
- GCP + Kubernetes
- Terraform + Go/Python
- Senior level role
- Healthcare security
You will help build and mature the application security program at Virta Health, a company reversing type 2 diabetes through personalized nutrition. Working with the security lead, you will implement best practices and embed security principles across engineering, product, and platform teams.
The focus is on securing sensitive health information by improving controls in GCP and Kubernetes. You will replace manual processes with automated solutions for vulnerability detection and compliance, ensuring security is a seamless part of the software development lifecycle.
What you'll do
- Assess and improve security controls within GCP and Kubernetes environments
- Integrate security best practices early into the software development lifecycle
- Design and manage automation for vulnerability detection and remediation
- Evolve identity and access management strategies for least-privilege access
- Strengthen network security architecture and policies in the cloud
- Establish and document practical security standards for engineering teams
- Drive vulnerability management and enhance incident response preparedness
- Promote security awareness and best practices across the organization
What you'll need
- 5-7+ years of experience, including 2+ years in high-growth startups
- Practical experience securing cloud-native apps, especially in Kubernetes
- Strong preference for experience with Google Cloud Platform (GCP)
- Proficiency in Infrastructure as Code tools, specifically Terraform
- Development experience with Go and/or Python programming languages
- Solid grasp of networking, IAM, encryption, and OWASP Top 10 vulnerabilities
- Experience with application security testing such as SAST, DAST, or IAST
- Ability to articulate complex security concepts to diverse technical audiences
Stack
- Google Cloud Platform
- Kubernetes
- Terraform
- Go
- Python
How you'll work
- Remote-first company with hubs in Denver and San Francisco
- Candidates must reside in eligible US states
- Hiring excludes residents of AK, DE, HI, ME, MS, OK, SD, VT
- Role involves handling sensitive patient data governed by HIPAA
What you get
- Location-based compensation structure
- Security and privacy training provided
- Comprehensive benefits package available on careers page