Remote DevSecOps Engineer — Secure Cloud for Patient Care

Claritas Rx; Washington (District of Columbia); On-site; USD 130,000 - 160,000; Full time

Job summary

Claritas Rx is seeking a hands-on DevSecOps engineer to protect our AWS-hosted SaaS platform processing sensitive patient data. You will own security monitoring, incident response, and cloud security controls across IAM, KMS, VPC, and WAF, while embedding security into the development lifecycle.

You'll drive vulnerability management, coordinate SAST/DAST and container scanning in CI/CD, and support HIPAA, SOC 2 Type II, and HITRUST compliance.

Qualifications

• 4+ years in information security engineering or cloud security.
• Strong AWS security expertise: IAM, KMS, VPC, GuardDuty.
• Experience running vulnerability management programs.
• Incident response experience in cloud environments.
• Experience integrating SAST/DAST and container scans into CI/CD.

Responsibilities

• Own security monitoring across the platform and incident response.
• Design and maintain AWS security controls (IAM, KMS, VPC, WAF).
• Coordinate vulnerability management lifecycle and CI/CD scanning.
• Support HIPAA, SOC 2 Type II, and HITRUST compliance programs.
• Collaborate with SRE and Software Engineering to embed security in deployments.

Skills

InfoSec experience

AWS security

Vulnerability mgmt

Incident response

CI/CD security tooling

HIPAA/SOC2/HITRUST

Python scripting

Clear communication

Education

B.S. in Computer Science

Job description

Claritas Rx is seeking a hands-on DevSecOps engineer to protect our AWS-hosted SaaS platform processing sensitive patient data. You will own security monitoring, incident response, and cloud security controls across IAM, KMS, VPC, and WAF, while embedding security into the development lifecycle.

You'll drive vulnerability management, coordinate SAST/DAST and container scanning in CI/CD, and support HIPAA, SOC 2 Type II, and HITRUST compliance.