Remote DevSecOps Engineer: Cloud Security & Automation

Virta Health; Denver, San Francisco (CO, CA); Hybrid; USD 179,000 - 188,000; Full time

Job summary

Virta Health seeks a DevSecOps engineer to build and mature its application security program. You will help embed security across the development lifecycle, working with a security lead and cross-functional teams in a remote-first environment with Denver and San Francisco hubs.

Responsibilities include securing Kubernetes/GCP, strengthening IAM, automating security tooling, improving network security, and developing clear security standards.

Qualifications

• Experience securing cloud-native apps in Kubernetes; GCP preferred.
• Strong knowledge of IAM, encryption, and OWASP Top 10.
• Excellent communication across teams and security influence.
• Hands-on in security testing (SAST/DAST/IAST) and vulnerability management.
• Terraform IaC expertise.

Responsibilities

• Secure Virta's applications and platform within GCP/Kubernetes.
• Collaborate with Engineering, Product, and Platform to embed security early in the software development lifecycle.
• Design and automate security tooling for vulnerability detection and remediation.
• Strengthen IAM roles and access controls with least-privilege.
• Develop and communicate security standards and policies.
• Drive incident response preparedness and vulnerability management.

Skills

Kubernetes security

GCP experience

IAM

SAST

DAST

IAST

Terraform

Go

Python

Cloud security

Job description

Virta Health seeks a DevSecOps engineer to build and mature its application security program. You will help embed security across the development lifecycle, working with a security lead and cross-functional teams in a remote-first environment with Denver and San Francisco hubs.

Responsibilities include securing Kubernetes/GCP, strengthening IAM, automating security tooling, improving network security, and developing clear security standards.