DevSecOps Engineer

Ketryx; Österreich; Vor Ort; EUR 81.000 - 99.000; Vollzeit

Benefits dieser Stelle

Competitive compensation

Generous stock options possible

Generous PTO for full-time

Zusammenfassung

Ketryx, a Vienna-based AI software platform for regulated healthcare, is seeking a Senior DevSecOps Engineer. You will lead audit readiness, strengthen CI/CD workflows, and secure cloud infrastructure on AWS, including EKS, RDS, and IAM, while aligning with SOC 2 and other compliance standards.

This is a hybrid role in Vienna with at least three days on-site; exceptional candidates may be considered for remote work.

Qualifikationen

• A minimum of 5 years of professional experience in the DevSecOps or related engineering fields.
• Proficiency in configuring and maintaining AWS infrastructure (EC2, VPC, EKS, IAM, RDS); AWS certification is a strong plus.
• Experience with CI/CD tools such as GitHub Actions, Jenkins, CircleCI, or similar.
• Expertise in using IaC tools like CloudFormation or Terraform.
• Hands-on involvement in audits such as SOC 2 and HIPAA; leadership in audit processes preferred.
• Ability to research, implement, and enforce security for containers and Kubernetes.
• Ability to work with developers, sales teams, and client operations to address security questionnaires.

Aufgaben

• Maintain SOC 2 certification and other relevant standards, ensuring audits are successful.
• Respond to IT/security questionnaires from customers.
• Deliver an efficient and high-performing CI/CD build process.
• Implement and uphold security best practices across systems and workflows.
• Promptly address vulnerabilities and manage security incidents.
• Maintain and enhance performance, reliability, and scalability of server infrastructure.

Kenntnisse

Industry Experience

AWS Expertise

CI/CD Proficiency

Infrastructure as Code

Audit Experience

Container Security

Cross-Functional Collaboration

Tools

GitHub Actions

Jenkins

CircleCI

CloudFormation

Terraform

Kubernetes (EKS)

Jobbeschreibung

Job Title: DevSecOps Engineer

Employment Status: Full-time

Office Hours: Monday, Wednesday, Friday in office / Tuesday, Thursday WFH option

Location: Vienna (hybrid model)

Compensation: Starting at €90,000, free in-office: lunch, drinks, coffee, snacks, Wiener Linien ticket, a yearly company retreat, regular team events.

*Compensation dependent on related experience level.

About Ketryx

Ketryx is an AI software platform that enables healthcare life sciences companies to ship life-saving regulated products in weeks instead of years.

Exploding product complexity is burying companies in compliance paperwork and blocking innovation. Our AI software removes this friction, dissolving the historical trade-off between innovation and compliance, and enables regulated industries to innovate at the pace of modern software.

Since launch, Ketryx already touches the lives of 100M patients and powers all of the world’s top five medical device manufacturers. Backed by Lightspeed Ventures, our founders are the former Head of AI at Amgen and CTO of Wolfram Cloud.

Healthcare and life sciences is just the beginning for us. Automotive, aerospace, energy – if it’s regulated, it’s because society decided it matters. These products move humanity, shape our future, and are safety-critical. Come join us and help build the AI platform to power safe innovation.

About the Role

We're looking for a Senior DevSecOps Engineer with a strong passion for Secure Software Development, Vulnerability Management, and Security Compliance Monitoring. The successful candidate will play a pivotal role in safeguarding our business's information security, taking the lead in audits at Ketryx by leveraging their expertise in audit preparation and participation.

As part of a dynamic team, your mission will be to enhance and streamline CI/CD workflows at Ketryx, oversee and optimize our AWS infrastructure, address internal IT requirements, and ensure compliance with relevant standards, regulations, and certifications, including SOC 2 and ISO 27001. You will secure our cloud infrastructure using cutting-edge technologies while driving innovation and operational excellence.

This is a hybrid role in Vienna, with at least three days per week on-site. We're open to remote for exceptional candidates.

About You

You're passionate about software and making a real impact. You're curious, enjoy solving tough problems, and love the idea of working in a fast-moving environment where you can take initiative. You're comfortable collaborating in English with team members from different areas, and you take pride in owning projects from beginning to end. Above all, you're excited about using technology to improve patient outcomes.

Responsibilities

• Compliance and Certification: Maintain SOC 2 certification and other relevant standards, ensuring successful completion of all related audits.
• Customer Assurance: Respond effectively to IT/security questionnaires from current and potential customers.
• CI/CD Optimization: Deliver an efficient and high-performing CI/CD build process.
• Security Excellence: Implement and uphold security best practices across systems and workflows.
• Incident Management: Promptly address vulnerabilities and manage security incidents to minimize risk.
• Infrastructure Optimization: Maintain and continually enhance the performance, reliability, and scalability of server infrastructure.

Required Skills

• Industry Experience: A minimum of 5 years of professional experience in the DevSecOps or related engineering fields (e.g., DevOps & compliance field).
• AWS Expertise: Proficiency in configuring and maintaining AWS infrastructure such as EC2, VPC, EKS, IAM, RDS. AWS certification is a strong plus.
• CI/CD Proficiency: Experience with CI/CD tools such as GitHub Actions, Jenkins, CircleCI, or similar platforms.
• Infrastructure as Code (IaC): Expertise in using IaC tools like CloudFormation or Terraform to automate and manage cloud environments.
• Audit Experience: Hands-on involvement in audits such as SOC 2 and HIPAA, with a preference for candidates who have led audit processes.
• Container Security: Ability to research, implement, and enforce security best practices for containers, container images, and Kubernetes (e.g., AWS EKS) across all development and deployment phases.
• Cross-Functional Collaboration: Ability to work effectively with developers, sales teams, sales engineers, and client operations to address security questionnaires and related requirements.

Preferred Skills

• Database Management: Previous experience managing and optimizing databases, particularly PostgreSQL, is a strong asset.
• Certifications: Professional certifications such as CSSLP, CISSP, or CISA are considered as a plus.

Our Tech Stack

Frontend: TypeScript, React, Next.js, Tailwind, JollyUI

Backend: PostgreSQL, Redis, GraphQL (urql), Prisma

Testing: Jest, Cucumber, Playwright

Infrastructure: AWS (e.g. S3, RDS, Elastic Beanstalk), Sentry

Collaboration: Slack, GitHub, Figma, Jira, Confluence

What We Offer

• Competitive compensation
• Generous stock options possible
• Work in an exciting field with a positive impact on the world
• Opportunity to learn and grow as part of a global team
• Generous PTO for full-time

Ketryx is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances

Ketryx is saving and improving lives by making medical software safe and reliable. We empower software teams building medical applications to create safe, secure, and compliant products used by patients and providers worldwide. We believe that, by automating much of the documentation and quality processes, teams will be able to produce safer and more innovative medical software faster.

Ketryx is at the forefront of helping teams incorporate AI/ML into medical software and that's why we need you!