Development, Security, and Operations Engineer

About the role

Virta Health is seeking a dedicated Cloud Security Engineer to join our expanding Foundations team. This role focuses on building and maturing our application security program as we scale our operations. You will define security strategy, implement best practices, and integrate security principles across the organization.

Key facts

What you'll do

• Evaluate and improve existing security controls within GCP and Kubernetes to enhance our overall security posture.
• Collaborate with Engineering, Product, and Platform teams to embed security best practices early in the software development lifecycle.
• Design, implement, and manage security tools and automation for vulnerability detection, remediation, and compliance.
• Develop our identity and access management (IAM) strategy to ensure least-privilege access and strong auditing capabilities.
• Continuously enhance network security architecture, policies, and controls in our cloud environment.
• Create and communicate clear security policies, standards, and guidelines for engineering teams.
• Lead vulnerability management and improve incident response readiness.
• Promote security awareness and best practices throughout the engineering organization.

Requirements

• Practical experience securing cloud-native applications and infrastructure, especially in Kubernetes.
• Strong understanding of networking, identity management (IAM), encryption, and common web application vulnerabilities like OWASP Top 10.
• Excellent communication skills to explain complex security concepts and influence technical direction across teams.
• Significant hands-on experience in application security, including threat modeling, secure coding, vulnerability management, and security testing (SAST, DAST, IAST).
• Proficiency with Infrastructure as Code (IaC) tools, specifically Terraform.
• Development experience with Go and Python.

Nice to have

• GCP experience is strongly preferred.

Skills & tools

• GCP
• Kubernetes
• OWASP Top 10
• Terraform
• Go
• Python
• SAST
• DAST
• IAST

Practical notes

This is a remote position. Virta Health maintains a location-based compensation structure. Starting pay is determined by qualifications and experience. As part of your role, you will handle sensitive patient information governed by HIPAA and will receive security and privacy training. Virta Health does not hire corporate roles in AK, AR, DE, HI, ME, MS, NM, OK, SD, VT, WI.