DevSecOps Engineer

Med Clinic X Inc.; Austin (TX); Vor Ort; USD 130.000 - 180.000; Vollzeit

Zusammenfassung

Med Clinic X is seeking a DevSecOps Engineer to weave security into our software development and deployment practices. You will design secure cloud environments, automate security workflows, and strengthen CI/CD security for healthcare platforms handling sensitive data.

You will collaborate with engineering, DevOps, and security teams to implement IAM, IaC checks, and DLP measures, ensuring HIPAA and SOC 2 compliance across systems and pipelines.

Qualifikationen

• Bachelor’s in CS, Cybersecurity, IT, or related field.
• Experience in DevOps, security engineering, or cloud security.
• Strong understanding of cloud infrastructure and IAM security.
• Experience configuring automated CI/CD pipelines (GitHub Actions, GitLab).
• Experience with container security and Infrastructure as Code.

Aufgaben

• Implement security practices across software development workflows.
• Integrate security and dependency scanners (SAST/SCA) in CI/CD.
• Automate vulnerability testing and runtime configuration audits.
• Enforce secure image signing and binary authorization rules.
• Secure AWS, Azure, or GCP cloud configurations.
• Implement IAM role definitions using Least Privilege principles.
• Configure infrastructure as code (IaC) linting and drift scans.
• Deploy VPC network segmentation and ingress ALB security gates.
• Deploy HIPAA and SOC2 compliance controls for systems data.
• Configure customer-managed KMS encryption keys for data-at-rest.
• Implement regex-based log masking (DLP) for PII/PHI sanitizing.
• Ensure secure data transit via TLS 1.3 endpoints.
• Advise developer teams on secure coding guidelines.
• Configure Kubernetes network policies and context restrictions.
• Manage security tools integrations within the workspace.
• Support compliance auditing and security incident dry-runs.

Kenntnisse

DevOps

Security engineering

Cloud security

CI/CD pipelines

Container security

Infrastructure as Code

Ausbildung

Bachelor's in CS/Cybersecurity/IT

Tools

GitHub Actions

GitLab

Trivy

Checkov

Terraform

Jobbeschreibung

About Med Clinic X Med Clinic X is a healthcare technology company building secure, scalable, and intelligent digital health solutions for healthcare organizations across the United States.

About Med Clinic X Med Clinic X is a healthcare technology company building secure, scalable, and intelligent digital health solutions for healthcare organizations across the United States.

We develop healthcare SaaS platforms, AI-driven healthcare systems, patient portals, telemedicine solutions, automation workflows, and cloud-based digital health products for clinics, hospitals, and healthcare providers.

Our mission is to build healthcare technology that combines innovation with strong security, reliability, and compliance.

Job Overview

We are seeking a DevSecOps Engineer to integrate security practices into our software development and infrastructure processes.

In this role, you will design secure cloud environments, automate security workflows, improve CI/CD security, and protect healthcare applications handling sensitive data. You will work closely with engineering, DevOps, and security teams to ensure Med Clinic X platforms meet high standards of security and compliance for US healthcare organizations.

Responsibilities

Security Engineering & Automation

• Implement security practices across software development workflows.
• Integrate security and dependency scanners (SAST/SCA) in CI/CD.
• Automate vulnerability testing and runtime configuration audits.
• Enforce secure image signing and binary authorization rules.

Cloud Infrastructure Security

• Secure AWS, Azure, or GCP cloud configurations.
• Implement IAM role definitions using Least Privilege principles.
• Configure infrastructure as code (IaC) linting and drift scans.
• Deploy VPC network segmentation and ingress ALB security gates.

Healthcare Data Protection

• Deploy HIPAA and SOC2 compliance controls for systems data.
• Configure customer-managed KMS encryption keys for data-at-rest.
• Implement regex-based log masking (DLP) for PII/PHI sanitizing.
• Ensure secure data transit via enforced TLS 1.3 endpoints.

DevOps Collaboration

• Advise developer teams on secure coding guidelines.
• Configure Kubernetes network policies and context restrictions.
• Manage security tools integrations within the workspace.
• Support compliance auditing and security incident dry-runs.

Qualifications

Required

• Bachelor’s in CS, Cybersecurity, IT, or related field.
• Experience in DevOps, security engineering, or cloud security.
• Strong understanding of cloud infrastructure and IAM security.
• Experience configuring automated CI/CD pipelines (GitHub Actions, GitLab).
• Experience with container security and Infrastructure as Code.

Preferred

• Experience in US healthcare or healthcare SaaS environments.
• Knowledge of HIPAA, SOC 2, or healthcare compliance audits.
• Experience with cloud security scanning tools (Trivy, checkov, etc.).
• Background in application security or pen-testing.
• Relevant security certifications (Security+, CISSP, AWS Security).

Why Join Med Clinic X?

At Med Clinic X, you will help protect the technology infrastructure behind modern healthcare. You will:

• Secure healthcare platforms used by US organizations
• Build automated security systems
• Work with cloud and engineering teams
• Improve healthcare data protection
• Shape secure digital health infrastructure