We are growing and are looking for DevSecops to join our mission to increase access to life-saving treatments.
The Role:
Collaboration & Enablement
Act as a security advisor to development teams.
Collaborate cross-functionally to prioritize and address security topics.
Communicate risk, projects and mitigation strategies clearly and effectively.
Security in Dev & CI/CD
Design, implement, and maintain secure DevOps practices across the SDLC.
Integrate security tools (SAST, DAST, SCA, CSPM, etc.) into CI/CD pipelines.
Guide developers and DevOps teams on secure coding, vulnerability management, and remediation.
Review and harden CI/CD architecture (webhook signature verification, SSRF protection, replay attack mitigation) as pipelines evolve from static tokens to app-based auth models.
AI Security & Governance
Own security governance for AI coding/agent tools (Claude Code, Cursor, Codex, etc.)
least-privilege identities, admin console + MDM policy enforcement, agent access scoping.
Assess and monitor AI/LLM supply chain risk (model providers, orchestration frameworks/libraries, dependency compromise).
Partner with engineering on secure AI tool adoption and usage governance.
Automation & Monitoring
Develop and maintain automated security testing and vulnerability scanning processes to detect and remediate risks early in the development lifecycle.
Build and operate monitoring and alerting systems to ensure visibility.
Integrate and manage Viz SIEM platform (Coralogix), optimizing ingestion for signal-to-noise (e.g., cutting CI/CD and internal telemetry noise while preserving high-signal events).
Define alerting rules and dashboards to proactively identify suspicious activity.
Requirements: 5+ years of experience as a DevOps / DevSecOps / SecOps
Strong experience with CI/CD security (SAST, DAST, SCA, secrets scanning, etc.).
Proficiency in AWS, including networking, IAM, and security services.
Hands-on with infrastructure-as-code tools like Terraform.
Familiarity with automated security tooling and frameworks (e.g., OWASP, CIS Benchmarks).
Excellent problem-solving, communication, and collaboration skills.
Experience with integrating and managing SIEM tools.
Understanding of security best practices for Docker and Kubernetes.
Experience securing AI/LLM tooling and agent-based dev workflows (access governance, MDM enforcement, supply chain risk).
Experience with JIT/least-privilege access models for cloud data stores.
This position is open to all candidates.