Security, and Operations Engineer (Development)

Join Virta, a remote-first company dedicated to reversing type 2 diabetes. As a Cloud Security Engineer, you'll lead the charge in building and maturing our application security program, ensuring security is embedded in our development lifecycle. You'll have the autonomy to define strategy, implement best practices, and collaborate across teams. Enjoy a flexible work environment, comprehensive health benefits, and opportunities for professional development.

• Assurer la sécurité des applications et de la plateforme de Virta, en contribuant directement à la confiance des membres et des partenaires.
• Collaborer avec les équipes d'ingénierie, de produit et de plateforme pour intégrer les meilleures pratiques de sécurité dès le début du cycle de développement logiciel.
• Concevoir, mettre en œuvre et gérer des outils et des automatisations de sécurité pour rationaliser la détection des vulnérabilités, la remédiation et la vérification de la conformité.
• If you thrive on building secure systems, automation, fostering a security-conscious culture, and making a tangible difference in protecting sensitive health information, this role is for you
• Development experience with Go and Python
• Strong grasp of networking concepts, identity management (IAM), encryption, and common web application vulnerabilities (e.g., OWASP Top 10)
• Significant hands-on experience in application security, including threat modeling, secure coding practices, vulnerability management, and security testing (SAST, DAST, IAST)
• Understanding and practical experience in securing cloud-native applications and infrastructure, particularly in Kubernetes environments. GCP experience is strongly preferred
• Excellent communication skills with the ability to clearly articulate complex security concepts to diverse audiences and influence technical direction across teams
• Proficiency in Infrastructure as Code (IaC) tools, specifically Terraform
• You have no ego and understand that everyone has something to bring to the table regardless of experience
• You put people first and take care of yourself, your peers, and our patients equally
• You appreciate transparency and promote trust and empowerment through open access of information
• You take risks and rapidly iterate
• You have a strong sense of ownership and take initiative while empowering others to do the same
• You prioritize positive impact over busy work
• You are evidence-based and prioritize data and science over seniority or dogma