Cloud Security Engineer — Kubernetes & IAM (Remote)

Virta Health; United States; On-site; USD 145,491 - 187,900; Full time

Job summary

Virta Health is hiring a Cloud Security Engineer to build and mature our application security program as part of the Foundations team. You will own security design in GCP and Kubernetes, partner with Engineering, Product, and Platform teams to embed security early in the SDLC, and drive automation for vulnerability detection, remediation, and compliance.

A remote-first company with office hubs in Denver and San Francisco.

Qualifications

• Understanding and practical experience securing cloud-native apps and infrastructure, esp. Kubernetes; GCP preferred.
• Strong grasp of networking, IAM, encryption, and OWASP Top 10.
• Excellent communication; ability to articulate security concepts across teams.
• Hands-on experience in threat modeling, secure coding, vulnerability mgmt, and security testing (SAST/DAST/IAST).
• Proficiency with Infrastructure as Code, specifically Terraform.
• Development experience with Go and Python.

Responsibilities

• Own and enhance security design in GCP and Kubernetes; mature security posture.
• Champion secure development by integrating security best practices early in the SDLC.
• Build and automate security tooling for vulnerability detection, remediation, and compliance.
• Refine access control; evolve IAM strategy with least-privilege and auditing.
• Strengthen network security architecture and controls in the cloud environment.
• Develop and communicate practical security policies and standards for engineering teams.
• Lead vulnerability management initiatives and improve incident response preparedness.
• Cultivate security awareness across the engineering organization.

Skills

Kubernetes security

Cloud security

IAM security

Encryption concepts

OWASP Top 10

Communication

Threat modeling

Secure coding practices

Vulnerability management

Security testing (SAST/DAST/IAST)

Tools

Terraform

Go

Python

Job description

Virta Health is hiring a Cloud Security Engineer to build and mature our application security program as part of the Foundations team. You will own security design in GCP and Kubernetes, partner with Engineering, Product, and Platform teams to embed security early in the SDLC, and drive automation for vulnerability detection, remediation, and compliance.

A remote-first company with office hubs in Denver and San Francisco.