DevSecOps Engineer
Listed on 2026-10-11
-
IT/Tech
Cybersecurity, Information Security & Data Protection, Cloud Computing: Infrastructure & Operations, Security Management & Operations
About Med Clinic X Med Clinic X is a healthcare technology company building secure, scalable, and intelligent digital health solutions for healthcare organizations across the United States.
About Med Clinic X Med Clinic X is a healthcare technology company building secure, scalable, and intelligent digital health solutions for healthcare organizations across the United States.
We develop healthcare SaaS platforms, AI-driven healthcare systems, patient portals, telemedicine solutions, automation workflows, and cloud-based digital health products for clinics, hospitals, and healthcare providers.
Our mission is to build healthcare technology that combines innovation with strong security, reliability, and compliance.
Job OverviewWe are seeking a Dev Sec Ops Engineer to integrate security practices into our software development and infrastructure processes.
In this role, you will design secure cloud environments, automate security workflows, improve CI/CD security, and protect healthcare applications handling sensitive data. You will work closely with engineering, Dev Ops, and security teams to ensure Med Clinic X platforms meet high standards of security and compliance for US healthcare organizations.
Responsibilities Security Engineering & Automation- Implement security practices across software development workflows.
- Integrate security and dependency scanners (SAST/SCA) in CI/CD.
- Automate vulnerability testing and runtime configuration audits.
- Enforce secure image signing and binary authorization rules.
- Secure AWS, Azure, or GCP cloud configurations.
- Implement IAM role definitions using Least Privilege principles.
- Configure infrastructure as code (IaC) linting and drift scans.
- Deploy VPC network segmentation and ingress ALB security gates.
- Deploy HIPAA and SOC2 compliance controls for systems data.
- Configure customer-managed KMS encryption keys for data-at-rest.
- Implement regex-based log masking (DLP) for PII/PHI sanitizing.
- Ensure secure data transit via enforced TLS 1.3 endpoints.
- Advise developer teams on secure coding guidelines.
- Configure Kubernetes network policies and context restrictions.
- Manage security tools integrations within the workspace.
- Support compliance auditing and security incident dry-runs.
Required
- Bachelor’s in CS, Cybersecurity, IT, or related field.
- Experience in Dev Ops, security engineering, or cloud security.
- Strong understanding of cloud infrastructure and IAM security.
- Experience configuring automated CI/CD pipelines (Git Hub Actions, Git Lab).
- Experience with container security and Infrastructure as Code.
Preferred
- Experience in US healthcare or healthcare SaaS environments.
- Knowledge of HIPAA, SOC 2, or healthcare compliance audits.
- Experience with cloud security scanning tools (Trivy, checkov, etc.).
- Background in application security or pen-testing.
- Relevant security certifications (Security+, CISSP, AWS Security).
At Med Clinic X, you will help protect the technology infrastructure behind modern healthcare. You will:
- Secure healthcare platforms used by US organizations
- Build automated security systems
- Work with cloud and engineering teams
- Improve healthcare data protection
- Shape secure digital health infrastructure
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).