DevSecOps Engineer

🕒 Setembro 18

🏈 Ohio – Remoto

🏈 Ohio – Remote

💵 $115.000 - $165.000 / ano

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

⛑ DevOps & Engenheiro de Confiabilidade do Site (SRE)

👻 Score fantasma 0%

O que significa: quão provável esta vaga está aberta sem contratação ativa.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

Gifthealth

SiteLinkedInTodas as Vagas

501 - 1000 funcionários

Fundada em 2020

🏥 Saúde

📦 Logística

💼 Consultoria

💰 $40.000.000 Private Equity Round - GiftHealth em 2023-04

Healthcare • Logistics • Consulting

A Gifthealth é uma empresa de acesso a pacientes e realização de prescrições apoiada por tecnologia que conecta pacientes, prescritores, farmácias e fabricantes farmacêuticos por meio de uma plataforma digital unificada. Ela simplifica o processo de cadastramento, verificação de benefícios eletrônicos, autorização eletrônica prévia e suporte de pagamento/acessibilidade, enquanto gerencia o cumprimento das farmácias e os serviços de apoio ao paciente. A plataforma também fornece aos fabricantes dados valiosos e insights sobre as jornadas dos pacientes e o desempenho das marcas, promovendo um acesso a medicamentos mais rápido e confiável.

Descrição

• Integrate security controls into the software development lifecycle • Establish practical secure development standards with engineering teams • Help developers identify and remediate application security vulnerabilities • Provide technical guidance on secure coding practices and common vulnerability classes • Support security reviews for applications, services, APIs, and major architectural changes • Design and implement automated security testing within CI/CD pipelines • Implement SAST, SCA, secret scanning, container image scanning, IaC scanning, and dependency vulnerability detection • Develop security gates for build and deployment pipelines • Correlate and de-duplicate vulnerability signals across Dependabot, Vanta, and Tenable • Evaluate applications and APIs for security weaknesses • Establish secure API authentication and authorization patterns • Support threat modeling and remediation of application security findings • Review Terraform, CloudFormation, Kubernetes manifests, and infrastructure definitions for security risks • Develop automated controls, secure infrastructure patterns, guardrails, and security automation • Support container image security, workload configuration, secrets management, and runtime security • Support the planned migration from Heroku to Render.com • Design synthetic or de-identified data seeding for DAST in staging without exposing PHI • Participate in architecture and design reviews • Work with Cloud Security, Security Operations, and engineering teams to improve security visibility and resolve findings • Track security findings, remediation times, vulnerability trends, security coverage, and secure-development adoption • Replace manual reviews with automated preventative controls

🎯 Requisitos

• 3+ years of experience in DevOps, DevSecOps, application security, platform engineering, software engineering, or security engineering • Experience with modern CI/CD systems and software delivery practices • Experience with modern application hosting platforms • Working knowledge of application security, API security, GitHub Advanced Security/CodeQL, dependency and vulnerability alert triage, CI/CD pipelines, Infrastructure-as-Code, secrets management, and software supply chain security • Experience with scripting or programming using Python, Go, JavaScript, PowerShell, or Bash • Experience with Git-based development workflows and working directly with developers and engineering teams • Demonstrated application of the listed qualifications • Ability to work at a computer for extended periods • Ability to communicate effectively, verbally and in writing, with engineering and security stakeholders • Ability to handle and access sensitive security and system data in compliance with organizational data handling requirements • Ability to respond to critical security or deployment issues outside standard working hours when required • Education not specified as a requirement; demonstrated hands-on experience evaluated • Licensure/certification not required • Preferred: Terraform, Kubernetes, or container orchestration experience • Preferred: Rails security tooling such as Brakeman, bundler-audit, or Dependabot • Preferred: SAST, SCA, secrets scanning, or IaC security tool implementation • Preferred: OWASP Top 10, cloud-native security services, and threat modeling familiarity • Preferred: identity, authentication, authorization, secrets management, and regulated-environment experience • Ruby experience is a strong plus

🏖️ Benefícios

• Full-time employment • Standard business hours • Flexible schedule for security-critical deployment reviews or urgent remediation timelines • Equal employment opportunity and inclusive work environment