DevSecOps Engineer: Secure DevOps & Automated Security

Gifthealth; Columbus (OH); On-site; USD 115,000 - 165,000; Full time

Job summary

Gifthealth, a Columbus-based healthcare technology company, seeks a DevSecOps Engineer to embed security into CI/CD, IaC, and container environments while supporting the migration from Heroku to Render.com. You will partner with Software, Platform, DevOps and Security teams to build scalable security automation that enables fast delivery without compromising protection of PHI and sensitive data.

The role emphasizes practical secure development standards, threat modeling, and reusable controls to

Qualifications

• Experience in DevSecOps, security in the software development lifecycle.
• 3+ years in DevOps, DevSecOps, security engineering, or related roles.
• Knowledge of security controls in CI/CD and software supply chain security.
• Familiarity with Rails security tooling and application security best practices.

Responsibilities

• Integrate security controls into the software development lifecycle.
• Design automated security testing within CI/CD pipelines and gates.
• Implement SAST, SCA, secrets scanning, and IaC security tooling.
• Support security reviews for new applications, services, APIs, and major changes.
• Reduce alert fatigue by correlating and de-duplicating vulnerability signals across tools.
• Collaborate with engineering teams to minimize friction and accelerate secure delivery.

Skills

CI/CD Security

SAST

SCA

IaC Security

Kubernetes

Ruby on Rails

Scripting

GitHub Advanced Security

Tools

GitHub Actions

Terraform

CloudFormation

Render.com

AWS

Job description

Gifthealth, a Columbus-based healthcare technology company, seeks a DevSecOps Engineer to embed security into CI/CD, IaC, and container environments while supporting the migration from Heroku to Render.com. You will partner with Software, Platform, DevOps and Security teams to build scalable security automation that enables fast delivery without compromising protection of PHI and sensitive data.

The role emphasizes practical secure development standards, threat modeling, and reusable controls to