DevSecOps Engineer

Med Clinic X is a healthcare technology company building secure, scalable, and intelligent digital health solutions for healthcare organizations across the United States.

We develop healthcare SaaS platforms, AI-driven healthcare systems, patient portals, telemedicine solutions, automation workflows, and cloud-based digital health products for clinics, hospitals, and healthcare providers.

Our mission is to build healthcare technology that combines innovation with strong security, reliability, and compliance.

We are seeking a Dev Sec Ops  Engineer to integrate security practices into our software development and infrastructure processes.

In this role, you will design secure cloud environments, automate security workflows, improve CI/CD security, and protect healthcare applications handling sensitive data. You will work closely with engineering, Dev Ops, and security teams to ensure Med Clinic X platforms meet high standards of security and compliance for US healthcare organizations.

• Implement security practices across software development workflows.
• Integrate security and dependency scanners (SAST/SCA) in CI/CD.
• Automate vulnerability testing and runtime configuration audits.
• Enforce secure image signing and binary authorization rules.
• Secure AWS, Azure, or GCP cloud configurations.
• Configure infrastructure as code (IaC) linting and drift scans.
• Deploy VPC network segmentation and ingress ALB security gates.
• Deploy HIPAA and SOC2 compliance controls for systems data.
• Configure customer-managed KMS encryption keys for data-at-rest.
• Implement regex-based log masking (DLP) for PII/PHI sanitizing.
• Ensure secure data transit via enforced TLS 1.3 endpoints.
• Advise developer teams on secure coding guidelines.
• Configure Kubernetes network policies and context restrictions.
• Manage security tools integrations within the workspace.
• Support compliance auditing and security incident dry-runs.

• Bachelor’s in CS, Cybersecurity, IT, or related field.
• Experience in Dev Ops, security engineering, or cloud security.
• Strong understanding of cloud infrastructure and IAM security.
• Experience configuring automated CI/CD pipelines (Git Hub Actions, Git Lab).
• Experience with container security and Infrastructure as Code.

• Experience in US healthcare or healthcare SaaS environments.
• Knowledge of HIPAA, SOC 2, or healthcare compliance audits.
• Experience with cloud security scanning tools (Trivy, checkov, etc.).
• Background in application security or pen-testing.
• Relevant security certifications (Security+, CISSP, AWS Security).

At Med Clinic X, you will help protect the technology infrastructure behind modern healthcare. You will:

• Secure healthcare platforms used by US organizations
• Build automated security systems
• Work with cloud and engineering teams

CI/CD Security Scanning IAM Least Privilege KMS / TLS Encryption Kubernetes & Docker Sec Terraform / IaC Security Vulnerability Assessment

Integrate static application scanning (SAST) and vulnerability audits directly into pipeline builds.

Deploy lease-privilege IAM roles and automate credentials rotation policies across multi-tenant infrastructures.

Audit Kubernetes namespace boundaries, registry image signatures, and network access policies.

Implement regex-based Data Loss Prevention filters sanitizing logs before cloud storage ingestion.

Configure automated KMS keys and TLS 1.3 handshakes across all transactional database services.

Audit alerts originating from cloud configurations, dependency lists, and system runtime checks.