DevSecOps Engineer

🔥 29 minutes ago

🏈 Ohio – Remote

🏈 Ohio – Remote

💵 $115k - $165k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

⛑ DevOps & Site Reliability Engineer (SRE)

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Gifthealth

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2020

🏥 Healthcare

📦 Logistics

💼 Consulting

💰 $40M Private Equity Round - GiftHealth on 2023-04

Healthcare • Logistics • Consulting

Gifthealth is a technology-enabled patient access and prescription fulfillment company that connects patients, prescribers, pharmacies, and pharmaceutical manufacturers through a unified digital platform. It streamlines enrollment, electronic benefits verification, e-prior authorization, and payment/affordability support while managing pharmacy fulfillment and patient support services. The platform also provides manufacturers with actionable data and insights on patient journeys and brand performance, driving faster, more reliable medication access.

📋 Description

• Integrate security controls into the software development lifecycle • Establish practical secure development standards with engineering teams • Help developers identify and remediate application security vulnerabilities • Provide technical guidance on secure coding practices and common vulnerability classes • Support security reviews for applications, services, APIs, and major architectural changes • Design and implement automated security testing within CI/CD pipelines • Implement SAST, SCA, secret scanning, container image scanning, IaC scanning, and dependency vulnerability detection • Develop security gates for build and deployment pipelines • Correlate and de-duplicate vulnerability signals across Dependabot, Vanta, and Tenable • Evaluate applications and APIs for security weaknesses • Establish secure API authentication and authorization patterns • Support threat modeling and remediation of application security findings • Review Terraform, CloudFormation, Kubernetes manifests, and infrastructure definitions for security risks • Develop automated controls, secure infrastructure patterns, guardrails, and security automation • Support container image security, workload configuration, secrets management, and runtime security • Support the planned migration from Heroku to Render.com • Design synthetic or de-identified data seeding for DAST in staging without exposing PHI • Participate in architecture and design reviews • Work with Cloud Security, Security Operations, and engineering teams to improve security visibility and resolve findings • Track security findings, remediation times, vulnerability trends, security coverage, and secure-development adoption • Replace manual reviews with automated preventative controls

🎯 Requirements

• 3+ years of experience in DevOps, DevSecOps, application security, platform engineering, software engineering, or security engineering • Experience with modern CI/CD systems and software delivery practices • Experience with modern application hosting platforms • Working knowledge of application security, API security, GitHub Advanced Security/CodeQL, dependency and vulnerability alert triage, CI/CD pipelines, Infrastructure-as-Code, secrets management, and software supply chain security • Experience with scripting or programming using Python, Go, JavaScript, PowerShell, or Bash • Experience with Git-based development workflows and working directly with developers and engineering teams • Demonstrated application of the listed qualifications • Ability to work at a computer for extended periods • Ability to communicate effectively, verbally and in writing, with engineering and security stakeholders • Ability to handle and access sensitive security and system data in compliance with organizational data handling requirements • Ability to respond to critical security or deployment issues outside standard working hours when required • Education not specified as a requirement; demonstrated hands-on experience evaluated • Licensure/certification not required • Preferred: Terraform, Kubernetes, or container orchestration experience • Preferred: Rails security tooling such as Brakeman, bundler-audit, or Dependabot • Preferred: SAST, SCA, secrets scanning, or IaC security tool implementation • Preferred: OWASP Top 10, cloud-native security services, and threat modeling familiarity • Preferred: identity, authentication, authorization, secrets management, and regulated-environment experience • Ruby experience is a strong plus

🏖️ Benefits

• Full-time employment • Standard business hours • Flexible schedule for security-critical deployment reviews or urgent remediation timelines • Equal employment opportunity and inclusive work environment