DevSecOps Engineer

🕒 Agosto 23

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $130.000 - $160.000 / ano

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

⛑ DevOps & Engenheiro de Confiabilidade do Site (SRE)

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 2%

O que significa: quão provável esta vaga está aberta sem contratação ativa.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

Claritas Rx

SiteLinkedInTodas as Vagas

51 - 200 funcionários

🏥 Saúde

💼 Consultoria

📦 Logística

💰 Private Equity Round em 2021-03

Healthcare • Consulting • Logistics

A Claritas Rx é uma empresa de análises de saúde que utiliza IA para melhorar o acesso dos pacientes a tratamentos transformadores de vida. A empresa oferece um conjunto de soluções que inclui a Ascend AI Platform, Patient Watchtown, Patient Services CRM e Cell and Gene Performance Benchmarking. Suas ofertas se concentram em melhorar a visibilidade dos pacientes, prever riscos precoces, envolver parceiros de forma eficiente e otimizar estratégias de suporte ao paciente. Usando análises impulsionadas por IA, a Claritas Rx ajuda os provedores de saúde a aumentar as taxas de preenchimento e adesão para suas marcas, garantindo que os pacientes não sejam deixados de lado. A empresa se especializa em fornecer insights sobre problemas de acesso dos pacientes e benchmarking de desempenho na indústria farmacêutica.

Descrição

• Protect the confidentiality, integrity, and availability of Claritas Rx's AWS-hosted SaaS platform processing sensitive patient and commercial data • Own day-to-day security engineering, including infrastructure hardening, vulnerability management, security-event response, and SDLC security integration • Tune and triage alerts from AWS GuardDuty, Security Hub, CloudTrail, and related tools • Investigate, contain, remediate, and document security incidents; lead post-incident reviews and corrective actions • Improve detection capabilities, log-analysis pipelines, alert rules, and correlation logic to reduce MTTD and MTTR • Participate in the security-event on-call rotation and maintain escalation paths and runbooks • Design, implement, and maintain AWS security controls, including IAM, SCPs, KMS, VPC security, WAF, and network segmentation • Review AWS configurations using AWS Config, Inspector, Macie, and third-party tooling; remediate and track findings • Partner with SRE on secure AWS CDK infrastructure-as-code templates and version-controlled, auditable, reproducible controls • Evaluate AWS services and architecture changes for security implications and advise engineering teams • Implement security-focused observability patterns • Support vulnerability lifecycle activities including asset discovery, scanning, prioritization, remediation tracking, and reporting • Integrate SAST, DAST, dependency scanning, and container image scanning into GitHub Actions CI/CD pipelines • Research emerging threats, CVEs, and attacker techniques and translate findings into defensive improvements • Support HIPAA, SOC 2 Type II, and HITRUST programs through evidence collection, control testing, and gap remediation • Ensure PHI handling, encryption, access control, data classification, and audit logging meet regulatory requirements • Maintain and test encryption, key management, secrets rotation via AWS Secrets Manager, and DLP controls • Support external audits by preparing evidence, responding to auditors, and tracking findings through remediation • Develop and maintain security policies, standards, and procedures • Administer AWS IAM roles, policies, permission boundaries, and identity access lifecycles • Improve MFA, SSO, authentication, authorization, and privileged access management • Collaborate with SRE and Software Engineering on production readiness, architecture, and deployment security • Provide practical, risk-informed security guidance to engineering teams • Communicate security risks and program status to technical and non-technical stakeholders, including leadership • Report to the Sr. Manager, Site Reliability

🎯 Requisitos

• 4+ years of experience in information security engineering, cloud security, or a closely related discipline with hands-on technical ownership • Solid practical AWS security expertise, including IAM, KMS, VPC security, CloudTrail, GuardDuty, Security Hub, Config, and WAF • Experience operating a vulnerability management program across infrastructure and application layers • Demonstrated ability to respond to and investigate cloud-environment security incidents from triage through containment, root cause analysis, and corrective action • Familiarity integrating SAST, DAST, dependency scanning, and container scanning into CI/CD pipelines and developer workflows • Working knowledge of HIPAA, SOC 2, and/or HITRUST technical-control requirements • Scripting proficiency in Python, Bash, or equivalent • Strong written and verbal communication skills • Collaborative, team-oriented mindset and ability to influence without direct authority • Ability to operate independently in a fast-paced, high-growth startup environment • Primarily remote work with occasional travel requirements • Preferred: healthcare technology or digital health experience with HIPAA-regulated PHI • Preferred: threat modeling methodologies such as STRIDE or PASTA • Preferred: penetration testing concepts and third-party security assessments • Preferred: privileged access management and secrets management at scale • Preferred: TypeScript, NestJS, PostgreSQL, and React • Preferred: AI tools, including Claude • Preferred: relevant certifications such as AWS Security Specialty, CISSP, CISM, CEH, OSCP, or CompTIA Security+ • Preferred: B.S. in Computer Science, Information Security, or a related discipline, or equivalent practical experience

🏖️ Benefícios

• Flexible, collaborative work environment • Unlimited PTO • Stock options • Growing set of tools and technology • Accelerated professional development through shared learning and collaboration • Respectful and fun work environment • Employee empowerment through effective use of technology and tools • Regional town hall gatherings approximately every other month for employees within reasonable driving distance • Competitive benefits package • Company-provided onboarding equipment; no purchases required