DevSecOps Engineer
Claritas Rx18 days ago
Remote, United StatesMid Level
Base Salary
$130k - $160k/yr
Responsibilities
- Own security monitoring and respond to cloud security incidents from triage through containment, remediation, documentation, and post-incident review.
- Design and maintain AWS security controls covering IAM, SCPs, KMS, VPC security, WAF, network segmentation, and infrastructure-as-code.
- Operate the vulnerability management lifecycle across infrastructure and applications, including scanning, prioritization, remediation tracking, and reporting.
- Integrate SAST, DAST, dependency scanning, and container image scanning into GitHub Actions and developer workflows.
- Support HIPAA, SOC 2 Type II, and HITRUST compliance through evidence collection, control testing, gap remediation, and audit support.
- Maintain data protection controls, including encryption, AWS Secrets Manager rotation, DLP, access control, and audit logging.
- Administer identity and access management processes, including provisioning, access reviews, de-provisioning, MFA, SSO, and privileged access management.
- Collaborate with SRE and Software Engineering on architecture reviews, production readiness, deployment security, and practical risk guidance.
- Research emerging threats, CVEs, and attacker techniques and translate findings into defensive improvements.
Requirements
- At least 4 years of experience in information security engineering, cloud security, or a closely related discipline with hands-on technical ownership.
- Practical AWS security expertise covering IAM, KMS, VPC security, CloudTrail, GuardDuty, Security Hub, Config, and WAF.
- Experience operating a vulnerability management program across infrastructure and application layers.
- Experience investigating and responding to cloud security incidents from triage through containment, root cause analysis, and corrective action.
- Familiarity with integrating SAST, DAST, dependency scanning, and container scanning into CI/CD pipelines.
- Working knowledge of HIPAA, SOC 2, and/or HITRUST technical controls.
- Scripting proficiency in Python, Bash, or an equivalent language.
- Strong written and verbal communication skills and the ability to influence security outcomes without direct authority.
- Preferred experience in healthcare technology, HIPAA-regulated PHI, threat modeling, penetration testing, privileged access management, secrets management, or the Claritas Rx application stack.
- Preferred certifications include AWS Security Specialty, CISSP, CISM, CEH, OSCP, CompTIA Security+, or equivalent.
- A B.S. in Computer Science, Information Security, or a related discipline, or equivalent practical experience, is preferred.
- Experience using AI tools, including Claude, for threat hunting, security documentation, or compliance evidence workflows is preferred.
Benefits
- Competitive base salary of $130,000 to $160,000.
- Remote work arrangement with occasional travel requirements.
- Full-time employment with unlimited PTO and stock options.
- Flexible, collaborative work environment with professional development, shared learning, and employee empowerment.
- Regional in-person town hall gatherings approximately every other month for employees within reasonable driving distance.
- Company-provided onboarding equipment and no hiring-process fees.
Tech Stack
Categories
About Claritas Rx
Claritas Rx provides a HIPAA-compliant SaaS and analytics platform that integrates patient-level real-world data to help biopharmaceutical manufacturers improve access and adherence for specialty and rare-disease therapies. Its products combine predictive modeling, AI, and in-line CRM to surface barriers in the patient journey and support patient services teams. Founded in 2011 and headquartered in South San Francisco, the privately held company sells subscriptions and services to specialty and rare-disease brand teams.