DevSecOps Engineer

About Our ClientThe organization operates in the healthcare technology sector, specializing in solutions for rare diseases and specialty pharmaceuticals. It addresses challenges related to patient access and treatment adherence by combining artificial intelligence, predictive modeling, and real-world data to identify and resolve barriers throughout the patient journey. Its technology helps healthcare stakeholders improve therapy access, adherence, and patient outcomes.About the OpportunityThe DevSecOps Engineer is responsible for protecting the confidentiality, integrity, and availability of the organization’s AWS-hosted SaaS platform, which manages sensitive patient and commercial data. This individual contributor role embeds security throughout the software development lifecycle, strengthens cloud infrastructure, manages vulnerabilities, responds to security incidents, and supports compliance with healthcare and industry standards. The position plays a critical role in maintaining a secure and resilient technology platform.Responsibilities• Monitor security alerts and coordinate incident response activities for the platform.• Harden AWS cloud infrastructure and implement security best practices.• Manage vulnerability assessments, remediation efforts, and security findings.• Collaborate with software engineering and site reliability engineering teams to integrate security throughout the development lifecycle.• Support compliance with HIPAA, SOC 2 Type II, and HITRUST requirements.• Maintain data protection controls and participate in internal and external audit activities.• Administer identity and access management systems and enforce least-privilege access policies.• Evaluate new AWS and cloud services for security risks and provide recommendations.• Integrate security controls into CI/CD pipelines and infrastructure-as-code workflows.• Develop and maintain security processes, documentation, and operational standards.• Investigate security events and contribute to root cause analysis and corrective actions.• Participate in security-related on-call rotations and respond to critical events as needed.Requirements• Hands-on experience with AWS security services and cloud infrastructure hardening.• Knowledge of security monitoring, threat detection, and incident response practices.• Familiarity with vulnerability management tools, assessments, and remediation processes.• Understanding of healthcare and security compliance requirements, including HIPAA, SOC 2, and HITRUST.• Experience integrating security controls into CI/CD pipelines and infrastructure-as-code environments.• Understanding of identity and access management and least-privilege security principles.• Strong problem-solving and analytical skills.• Proactive security mindset with the ability to identify and address risks independently.• Strong communication and collaboration skills when working with engineering and technical teams.Pay Range and Compensation Package• Compensation for this role will be determined based on the candidate’s experience, skills, qualifications, location, and other relevant factors.Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin. Note:RemoteHunter is not the Employer of Record (EOR) for this role. Our purpose in this opportunity is to connect exceptional candidates with leading employers. We help job seekers worldwide discover roles that match their goals and guide them to complete their full application directly through the hiring company’s career page or ATS.