DevSecOps Engineer

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $130k - $160k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

⛑ DevOps & Site Reliability Engineer (SRE)

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 2%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Claritas Rx

WebsiteLinkedInAll Job Openings

51 - 200 employees

🏥 Healthcare

💼 Consulting

📦 Logistics

💰 Private Equity Round on 2021-03

Healthcare • Consulting • Logistics

Claritas Rx is a healthcare analytics company that leverages AI to enhance patient access to life-changing treatments. The company provides a suite of solutions including the Ascend AI Platform, Patient Watchtower, Patient Services CRM, and Cell and Gene Performance Benchmarking. Its offerings focus on improving patient visibility, predicting early risks, engaging partners efficiently, and optimizing patient support strategies. By using AI-driven analytics, Claritas Rx helps healthcare providers boost fill rates and adherence for their brands, ensuring patients do not fall through the cracks. The company specializes in providing insights into patient access issues and performance benchmarking in the pharmaceutical industry.

📋 Description

• Protect the confidentiality, integrity, and availability of Claritas Rx's AWS-hosted SaaS platform processing sensitive patient and commercial data • Own day-to-day security engineering, including infrastructure hardening, vulnerability management, security-event response, and SDLC security integration • Tune and triage alerts from AWS GuardDuty, Security Hub, CloudTrail, and related tools • Investigate, contain, remediate, and document security incidents; lead post-incident reviews and corrective actions • Improve detection capabilities, log-analysis pipelines, alert rules, and correlation logic to reduce MTTD and MTTR • Participate in the security-event on-call rotation and maintain escalation paths and runbooks • Design, implement, and maintain AWS security controls, including IAM, SCPs, KMS, VPC security, WAF, and network segmentation • Review AWS configurations using AWS Config, Inspector, Macie, and third-party tooling; remediate and track findings • Partner with SRE on secure AWS CDK infrastructure-as-code templates and version-controlled, auditable, reproducible controls • Evaluate AWS services and architecture changes for security implications and advise engineering teams • Implement security-focused observability patterns • Support vulnerability lifecycle activities including asset discovery, scanning, prioritization, remediation tracking, and reporting • Integrate SAST, DAST, dependency scanning, and container image scanning into GitHub Actions CI/CD pipelines • Research emerging threats, CVEs, and attacker techniques and translate findings into defensive improvements • Support HIPAA, SOC 2 Type II, and HITRUST programs through evidence collection, control testing, and gap remediation • Ensure PHI handling, encryption, access control, data classification, and audit logging meet regulatory requirements • Maintain and test encryption, key management, secrets rotation via AWS Secrets Manager, and DLP controls • Support external audits by preparing evidence, responding to auditors, and tracking findings through remediation • Develop and maintain security policies, standards, and procedures • Administer AWS IAM roles, policies, permission boundaries, and identity access lifecycles • Improve MFA, SSO, authentication, authorization, and privileged access management • Collaborate with SRE and Software Engineering on production readiness, architecture, and deployment security • Provide practical, risk-informed security guidance to engineering teams • Communicate security risks and program status to technical and non-technical stakeholders, including leadership • Report to the Sr. Manager, Site Reliability

🎯 Requirements

• 4+ years of experience in information security engineering, cloud security, or a closely related discipline with hands-on technical ownership • Solid practical AWS security expertise, including IAM, KMS, VPC security, CloudTrail, GuardDuty, Security Hub, Config, and WAF • Experience operating a vulnerability management program across infrastructure and application layers • Demonstrated ability to respond to and investigate cloud-environment security incidents from triage through containment, root cause analysis, and corrective action • Familiarity integrating SAST, DAST, dependency scanning, and container scanning into CI/CD pipelines and developer workflows • Working knowledge of HIPAA, SOC 2, and/or HITRUST technical-control requirements • Scripting proficiency in Python, Bash, or equivalent • Strong written and verbal communication skills • Collaborative, team-oriented mindset and ability to influence without direct authority • Ability to operate independently in a fast-paced, high-growth startup environment • Primarily remote work with occasional travel requirements • Preferred: healthcare technology or digital health experience with HIPAA-regulated PHI • Preferred: threat modeling methodologies such as STRIDE or PASTA • Preferred: penetration testing concepts and third-party security assessments • Preferred: privileged access management and secrets management at scale • Preferred: TypeScript, NestJS, PostgreSQL, and React • Preferred: AI tools, including Claude • Preferred: relevant certifications such as AWS Security Specialty, CISSP, CISM, CEH, OSCP, or CompTIA Security+ • Preferred: B.S. in Computer Science, Information Security, or a related discipline, or equivalent practical experience

🏖️ Benefits

• Flexible, collaborative work environment • Unlimited PTO • Stock options • Growing set of tools and technology • Accelerated professional development through shared learning and collaboration • Respectful and fun work environment • Employee empowerment through effective use of technology and tools • Regional town hall gatherings approximately every other month for employees within reasonable driving distance • Competitive benefits package • Company-provided onboarding equipment; no purchases required