DevSecOps Engineer - Claritas Rx

Who We Are

Claritas Rx uses AI and predictive modeling to help rare disease and specialty brands remove barriers that keep patients from accessing and staying on treatments they need. Named one of Inc.'s Best Workplaces in 2025 and recognized on the Inc. 5000 list for two consecutive years (2025 and 2026), we offer a flexible, collaborative work environment, unlimited PTO, stock options, and a growing set of tools to drive innovation.

The Position

We are seeking a skilled and hands-on DevSecOps Engineer to join our Engineering team. Reporting to the Sr. Manager, Site Reliability, you will protect the confidentiality, integrity, and availability of our AWS-hosted SaaS platform processing sensitive patient and commercial data.

You will own day-to-day security engineering: hardening infrastructure, managing vulnerability programs, responding to security events, and embedding security practices into the SDLC. You will ensure our platform maintains compliance with HIPAA, SOC 2 Type II, and HITRUST.

Key Accountabilities

Security Monitoring & Incident Response

• Own security monitoring: tune and triage alerts from AWS GuardDuty, Security Hub, CloudTrail, and related tooling.
• Serve as a primary responder for security incidents—investigate, contain, and remediate threats; drive post-incident reviews.
• Maintain and improve detection capabilities, log analysis pipelines, and alert rules to reduce MTTD and MTTR.
• Participate in the on-call rotation for security events.

Cloud Security Engineering

• Design, implement, and maintain security controls across AWS (IAM, SCPs, KMS, VPC security, WAF, network segmentation).
• Conduct regular configuration reviews using AWS Config, Inspector, Macie, and third-party tooling.
• Partner with SRE to ensure infrastructure-as-code (AWS CDK) templates follow security best practices.
• Evaluate new AWS services and architectural changes for security implications.

Vulnerability Management

• Support the vulnerability management lifecycle: asset discovery, scanning, prioritization, and remediation tracking.
• Integrate SAST, DAST, dependency scanning, and container image scanning into CI/CD pipelines (GitHub Actions).
• Track and communicate vulnerability metrics to engineering and leadership.

Compliance & Data Protection

• Support HIPAA, SOC 2 Type II, and HITRUST compliance programs, including evidence collection and control testing.
• Ensure PHI handling practices meet regulatory requirements for encryption, data classification, and audit logging.
• Maintain and test data protection controls including secrets rotation via AWS Secrets Manager.
• Support external audits and maintain security policies and procedures.

Identity & Access Management

• Administer AWS IAM roles, policies, and permission boundaries using least-privilege principles.
• Manage access lifecycle processes for human and machine identities (MFA, SSO, PAM).

Cross-Functional Partnership

• Collaborate with SRE and Software Engineering to embed security requirements into production readiness reviews.
• Serve as a trusted security resource, providing practical, risk-informed guidance.

Our Tech Stack

• Cloud: AWS (ECS, EC2, Aurora RDS, DynamoDB, Lambda, S3, SQS, EventBridge, Cognito, Secrets Manager, CloudFront, WAF)
• Infrastructure as Code: AWS CDK (primary); Terraform/OpenTofu a plus
• CI/CD: GitHub Actions
• Application Platform: NestJS, TypeScript, React, PostgreSQL, Turborepo
• Observability: CloudWatch, Sentry

Who You Are

Required Skills:

• 4+ years of experience in information security engineering, cloud security, or a closely related discipline.
• Solid, practical AWS security expertise (IAM, KMS, VPC, CloudTrail, GuardDuty, Security Hub, Config, WAF).
• Experience operating a vulnerability management program across infrastructure and application layers.
• Demonstrated incident response experience in a cloud environment.
• Familiarity integrating security tooling (SAST, DAST, container scanning) into CI/CD pipelines.
• Working knowledge of HIPAA, SOC 2, and/or HITRUST technical controls.
• Scripting proficiency in Python, Bash, or equivalent.
• Strong communication skills and a collaborative mindset.

Preferred Skills:

• Healthcare technology or digital health environment experience with HIPAA-regulated PHI.
• Threat modeling methodologies (STRIDE, PASTA).
• Relevant certifications (AWS Security Specialty, CISSP, CISM, CEH, OSCP, CompTIA Security+).

Benefits & Perks

• Competitive salary range of $130,000 to $160,000
• Unlimited PTO
• Stock options
• Collaborative, mission-driven remote work environment with regional gatherings