All jobs
DevSecOps Engineer
About this role
Virta Health is seeking a DevSecOps Engineer to strengthen its application security program and embed security practices across the development lifecycle. The role focuses on improving security in cloud-native environments, primarily Google Cloud Platform and Kubernetes, and collaborating with Engineering, Product, and Platform teams. The engineer will design and automate security tooling, manage access controls, strengthen network security, and drive vulnerability management and incident readiness. The position targets someone with hands-on security experience in cloud-native apps, IaC with Terraform, and development in Go or Python, with 5–7+ years in a high-growth startup or similar setting. The company operates remotely with location-based pay and has hubs in Denver and San Francisco; compensation for this role falls within a defined salary range and requires adherence to HIPAA-related privacy standards.
What you would do
- Assess and improve security controls in GCP and Kubernetes to mature Virta's security posture.
- Partner with Engineering, Product and Platform teams to integrate security practices early in the software development lifecycle (shift-left).
- Design, implement and manage security tooling and automation for vulnerability detection, remediation and compliance verification.
- Evolve identity and access management to enforce least-privilege and robust auditing.
- Improve network security architecture, policies and controls in the cloud environment.
- Develop and communicate practical security policies, standards and guidelines for engineering teams.
- Support vulnerability management and strengthen incident response readiness.
- Promote security awareness and best practices across the engineering organisation.
What they are asking for
- Security experience securing cloud-native applications and infrastructure, especially Kubernetes; strong preference for GCP experience.
- Knowledge of networking concepts, IAM, encryption, and web vulnerabilities (OWASP Top 10).
- Strong communication skills to convey complex security topics and influence technical direction.
- Hands-on application security experience including secure coding, vulnerability management, and security testing (SAST, DAST, IAST); threat modelling a plus.
- Proficiency with Infrastructure as Code tools, especially Terraform.
- Development experience in Go and/or Python.
- 5–7+ years of experience, preferably in a high-growth startup or similar environment.
Listing details are summarised from the source. Always confirm the role and the employer on the original posting before applying, and never pay to apply for a job.