DevSecOps Engineer
Core
Protect the confidentiality, integrity, and availability of an AWS-hosted SaaS platform processing sensitive patient and commercial data for biopharmaceutical companies.
Role type
Senior IC DevSecOps Engineer
Builds
Secure cloud infrastructure, CI/CD pipelines, and compliance controls for a digital health platform
Domain
Healthcare technology / Cloud Security
Deliverable
production ML models | infrastructure
Required skills
AWS security expertise, vulnerability management, incident response, IAM administration, compliance program support, CI/CD security integration
Preferred skills
Terraform/OpenTofu, Golang
Technologies
AWS (ECS, EC2, Aurora RDS, DynamoDB, Lambda, S3, SQS, EventBridge, Cognito, Secrets Manager, CloudFront, WAF, GuardDuty, Security Hub, Config, Inspector, Macie), AWS CDK, GitHub Actions, CloudWatch, Sentry, OpenFeature, Tableau, PostgreSQL, NestJS, React, PySpark, Kinesis
Responsibilities
Tune and triage security alerts from AWS tooling; respond to and remediate security incidents; design and maintain AWS security controls (IAM, VPC, WAF); integrate SAST/DAST and container scanning into CI/CD; support HIPAA, SOC 2 Type II, and HITRUST compliance programs; administer IAM roles and access lifecycle policies.
Seniority
Senior, hands-on IC
