Remote DevSecOps Engineer: Secure Cloud & Automation

virtahealth; United States; Remote; USD 179,000 - 188,000; Full time

Job summary

Virta Health is seeking a DevSecOps Engineer to help secure its applications and cloud platform. You will collaborate across teams to embed security in the development lifecycle, mature security controls in GCP/Kubernetes, and build automation for vulnerability management and compliance.

You will drive IAM improvements, network security, and security standards while promoting a security-aware culture across the engineering organization.

Qualifications

• Understanding and practical experience in securing cloud-native applications and infrastructure, particularly in Kubernetes environments. GCP experience is strongly preferred.
• Strong grasp of networking concepts, identity management (IAM), encryption, and common web application vulnerabilities (OWASP Top 10).
• Hands-on experience in application security, including secure coding practices, vulnerability management, and security testing (SAST, DAST, IAST); threat modeling is a plus.
• Proficiency in Infrastructure as Code (IaC) tools, Terraform.
• Development experience with Go and/or Python.
• 5-7+ years of experience with 2+ at a high growth startup or similar environment

Responsibilities

• As a DevSecOps Engineer, you will help secure Virta's applications and platform, directly contributing to the trust our members and partners place in us. You'll collaborate across teams to ensure security is a seamless part of our development lifecycle.
• Improve Security Design: Help assess our current security controls within GCP and Kubernetes, identify areas for improvement, and contribute to the maturation of our security posture from good to great.
• Champion Secure Development: Partner closely with Engineering, Product, and Platform teams to integrate security best practices early and often (shift-left) into the software development lifecycle.
• Build and Automate: Design, implement, and manage security tooling and automation to streamline vulnerability detection, remediation, and compliance verification. Replace manual processes with efficient, automated solutions.
• Refine Access Control: Evolve our identity and access management (IAM) strategy, ensuring least-privilege access and robust auditing capabilities across our systems.
• Strengthen Network Security: Continuously improve our network security architecture, policies, and controls within our cloud environment.
• Develop Clear Standards: Establish, document, and communicate practical security policies, standards, and guidelines for engineering teams.
• Support Security Initiatives: Drive vulnerability management efforts and enhance our incident response preparedness, ensuring we are ready to handle potential threats effectively.
• Cultivate Security Awareness: Act as a security evangelist, promoting security awareness and best practices throughout the engineering organization.

Skills

Go

Python

Communication

Security mindset

Startup experience

Tools

Kubernetes

GCP

IAM

Encryption

OWASP Top 10

SAST

DAST

IAST

Terraform

Job description

Virta Health is seeking a DevSecOps Engineer to help secure its applications and cloud platform. You will collaborate across teams to embed security in the development lifecycle, mature security controls in GCP/Kubernetes, and build automation for vulnerability management and compliance.

You will drive IAM improvements, network security, and security standards while promoting a security-aware culture across the engineering organization.