SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 179,451 - 187,900 / annual
Virta Health is seeking a DevSecOps Engineer to build and mature their application security program as they scale their impact in reversing obesity and type 2 diabetes. The company has raised over $350M and partners with major health plans, employers, and government organizations.
In this role, you'll work closely with the security lead to implement best practices and embed security principles across the organization. Key responsibilities include assessing and improving security controls within GCP and Kubernetes, integrating security early into the software development lifecycle (shift-left), designing and implementing security tooling and automation to streamline vulnerability detection and remediation, evolving identity and access management (IAM) strategy with least-privilege access, strengthening network security architecture, establishing security policies and standards, driving vulnerability management and incident response preparedness, and promoting security awareness throughout the engineering organization.
Your first 90 days will focus on immersing yourself in Virta's culture and mission, understanding their engineering workflows and cloud platform, learning existing systems and CI/CD pipelines, assessing current security posture across IAM, data security, and network controls, and beginning hands-on work on foundational projects like refining IAM roles and developing security automation.
Required qualifications include 5-7+ years of experience with 2+ years at a high-growth startup, practical experience securing cloud-native applications and Kubernetes environments (GCP strongly preferred), strong networking, IAM, encryption, and OWASP knowledge, hands-on application security experience including secure coding and vulnerability management, proficiency with Terraform and Infrastructure as Code, development experience with Go and/or Python, and strong communication skills to articulate complex security concepts to diverse audiences.
