Remote DevSecOps Engineer — Cloud-Native Security

Virta Health; United States; Remote; USD 179,000 - 188,000; Full time

Job summary

Virta Health is seeking a DevSecOps Engineer to advance our application security program. You’ll partner with engineering, product, and platform teams to embed security into the software development lifecycle across GCP and Kubernetes.

You’ll build automation, enhance IAM and network security, and drive vulnerability management, secure coding practices, and security testing (SAST/DAST/IAST) while promoting a security‑minded culture.

Qualifications

• Securing cloud-native apps and infrastructure in Kubernetes; GCP preferred.
• Strong networking, IAM, encryption, and OWASP Top 10 knowledge.
• Excellent communication across teams to influence security direction.
• Hands-on security practice including vulnerability management and testing (SAST/DAST/IAST); threat modeling a plus.
• IaC tooling with Terraform; Go and/or Python development experience.
• 5–7+ years in a high-growth startup or similar environment.

Responsibilities

• Improve Security Design: assess controls in GCP and Kubernetes and mature security posture.
• Champion Secure Development: integrate security early in the software lifecycle.
• Build and Automate: develop security tooling and automation for detection and remediation.
• Refine Access Control: evolve IAM with least-privilege and auditing.
• Strengthen Network Security: enhance cloud network policies and controls.
• Develop Clear Standards: document pragmatic security policies and guidelines.
• Support Security Initiatives: drive vulnerability management and incident readiness.
• Cultivate Security Awareness: promote security best practices across engineering.

Skills

Kubernetes security

GCP

Networking

IAM

Encryption

OWASP Top 10

Secure coding

Vulnerability mgmt

SAST

DAST

IAST

Threat modeling

Terraform

Go

Python

Startup experience

Job description

Virta Health is seeking a DevSecOps Engineer to advance our application security program. You’ll partner with engineering, product, and platform teams to embed security into the software development lifecycle across GCP and Kubernetes.

You’ll build automation, enhance IAM and network security, and drive vulnerability management, secure coding practices, and security testing (SAST/DAST/IAST) while promoting a security‑minded culture.