{"id":140002,"url":"https://alion.io/job/claritas-rx-devsecops-engineer","title":"DevSecOps Engineer","company":{"id":7965,"name":"Claritas Rx","domain":"claritasrx.com","url":"https://alion.io/company/claritas-rx","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"A","score":100,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":43,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":130000,"max":160000,"currency":"USD","period":"year","gross":null,"usd_annual":160000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon Kinesis","optional":false},{"name":"AWS","optional":false},{"name":"AWS CDK","optional":false},{"name":"CI/CD","optional":false},{"name":"DLP","optional":false},{"name":"ETL/ELT","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Go","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"Jira","optional":false},{"name":"Least Privilege","optional":false},{"name":"Nest.JS","optional":false},{"name":"PostgreSQL","optional":false},{"name":"pySpark","optional":false},{"name":"Python","optional":false},{"name":"React.js","optional":false},{"name":"Sentry","optional":false},{"name":"SOC 2","optional":false},{"name":"SQL","optional":false},{"name":"Tableau","optional":false},{"name":"TypeScript","optional":false},{"name":"Amazon Aurora","optional":true},{"name":"Amazon EC2","optional":true},{"name":"Amazon ECS","optional":true},{"name":"Amazon EventBridge","optional":true},{"name":"Amazon S3","optional":true},{"name":"AWS Glue","optional":true},{"name":"AWS Lambda","optional":true},{"name":"Claude","optional":true},{"name":"DynamoDB","optional":true},{"name":"JavaScript","optional":true},{"name":"Node JS","optional":true},{"name":"OpenTofu","optional":true},{"name":"pnpm","optional":true},{"name":"Rest API","optional":true},{"name":"Spark","optional":true},{"name":"STRIDE","optional":true},{"name":"Terraform","optional":true},{"name":"Threat Modeling","optional":true},{"name":"Turborepo","optional":true}],"status":"live","first_seen_at":"2026-10-14T23:01:56Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-17T06:48:11Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Who We Are\nClaritas Rx uses AI and predictive modeling to help rare disease and specialty brands remove the barriers that keep patients from accessing and staying on the treatments they need. By uniting the most complete view of the patient journey with purpose-built technologies, we predict and resolve access challenges before they disrupt care, combining advanced analytics, real-world data, AI, and CRM capabilities to increase start and refill rates, reduce abandonment, and improve brand performance. Our mission is to ensure patients with chronic, life-threatening diseases receive the support that enables the greatest benefit from their therapy. Simply put, our promise is progress for every patient journey.\nThis is the opportunity to help shape a first-in-industry digital health solution alongside a team of mission-driven professionals. We were named one of Inc.'s Best Workplaces in 2025 and recognized on the Inc. 5000 list for two consecutive years (2025 and 2026), and our team genuinely respects and supports each other. We thrive on being fast-paced, innovative, and results-driven, and our employees enjoy a flexible, collaborative work environment, unlimited PTO, stock options, and a growing set of tools and technology to drive innovation for our customers.\nThe Position\nWe are seeking a skilled and hands-on DevSecOps professional to join our Engineering team. Reporting to the Sr. Manager, Site Reliability, you will be a key individual contributor responsible for protecting the confidentiality, integrity, and availability of Claritas Rx's AWS-hosted SaaS platform - a system that processes sensitive patient and commercial data for some of the world's leading biopharmaceutical companies.\nIn this role, you will own day-to-day security engineering work: hardening infrastructure, managing vulnerability programs, responding to security events, and embedding security practices into the software development lifecycle. You will work closely with Software Engineering, SRE, and external compliance partners to ensure our platform maintains the rigorous compliance posture our customers and regulators require - including HIPAA, SOC 2 Type II, and HITRUST.\nThis is a high-impact individual contributor role suited to an engineer who thrives at the intersection of security and cloud infrastructure, takes ownership of outcomes, and brings a builder's mindset to security problems. The role is primarily remote with occasional travel requirements.\nKey Accountabilities\nSecurity Monitoring & Incident Response\nOwn security monitoring across the platform: tune and triage alerts from AWS GuardDuty, Security Hub, CloudTrail, and related tooling to distinguish signal from noise and surface actionable threats.\nServe as a primary responder for security incidents - investigate, contain, and remediate threats; document findings; and drive post-incident reviews with clear corrective actions.\nMaintain and continuously improve detection capabilities, including log analysis pipelines, alert rules, and correlation logic, to reduce mean time to detect (MTTD) and mean time to respond (MTTR).\nParticipate in on-call rotation for security events, with appropriate escalation paths and runbooks in place.\nCloud Security Engineering\nDesign, implement, and maintain security controls across the AWS environment - including IAM policies, SCPs, KMS key management, VPC security, WAF rulesets, and network segmentation.\nConduct regular reviews of cloud configurations using AWS Config, Inspector, Macie, and third-party tooling; remediate findings and track resolution to closure.\nPartner with the SRE team to ensure infrastructure-as-code (AWS CDK) templates follow security best practices and that security controls are version-controlled, auditable, and reproducible.\nEvaluate new AWS services and architectural changes for security implications, providing clear guidance to engineering teams before and during adoption.\nImplement security focused observability patterns to detect threats as they emerge.\nVulnerability Management\nSupport the vulnerability management lifecycle: asset discovery, scanning (infrastructure and application), risk-based prioritization, remediation tracking, and reporting.\nCoordinate with Software Engineering to integrate SAST, DAST, dependency scanning, and container image scanning into CI/CD pipelines (GitHub Actions), ensuring vulnerabilities are caught early in the SDLC.\nTrack and communicate vulnerability metrics to engineering and leadership, balancing remediation urgency against engineering capacity.\nResearch emerging threats, CVEs, and attacker techniques relevant to our technology stack and cloud environment; translate findings into actionable defensive improvements.\nCompliance & Data Protection\nSupport the maintenance and continuous improvement of Claritas Rx's HIPAA, SOC 2 Type II, and HITRUST compliance programs - including evidence collection, control testing, and gap remediation.\nEnsure PHI handling practices - at rest, in transit, and in processing - meet regulatory requirements; identify and close gaps in data classification, encryption, access control, and audit logging.\nMaintain and test data protection controls including encryption key management, secrets rotation (via AWS Secrets Manager), and DLP measures.\nSupport external audits and assessments: prepare evidence packages, respond to auditor inquiries, and track audit findings through remediation.\nContribute to the development and maintenance of security policies, standards, and procedures.\nIdentity & Access Management\nAdminister and continuously refine AWS IAM roles, policies, and permission boundaries, applying least-privilege principles across all environments.\nManage access lifecycle processes: provisioning, periodic access reviews, and de-provisioning for human and machine identities.\nEvaluate and improve authentication and authorization controls - including MFA enforcement, SSO integration, and privileged access management.\nCross-Functional Partnership\nCollaborate with SRE and Software Engineering to embed security requirements into production readiness reviews, architecture decisions, and deployment processes.\nServe as a trusted security resource for engineering teams - providing practical, risk-informed guidance rather than purely compliance-driven mandates.\nCommunicate security risks and program status clearly to both technical peers and non-technical stakeholders, including leadership.\nOur Stack\n Cloud: AWS (ECS, EC2, Aurora RDS, DynamoDB, Lambda, S3, SQS, EventBridge, Cognito, Secrets Manager, CloudFront, WAF)\n Infrastructure as Code: AWS CDK (primary); familiarity with Terraform/OpenTofu a plus\nCI/CD: GitHub Actions\n Application Platform: NestJS/TypeScript (backend), React/TypeScript (frontend), PostgreSQL, Turborepo, pnpm\n Data Platform: AWS Glue, Lake Formation, PySpark, Kinesis (data streaming), Python-based ELT pipelines\n Observability & Monitoring: CloudWatch (logs, metrics, alarms, dashboards), Sentry, OpenFeature (feature flags), Tableau\nLanguages in Use Across Engineering: TypeScript, Python, SQL; Golang familiarity a plus\nWork Management: Jira\nCompliance: HIPAA, SOC 2 Type II, HITRUST\nWho You Are\nRequired Skills:\n4+ years of experience in information security engineering, cloud security, or a closely related discipline with hands-on technical ownership.\nSolid, practical AWS security expertise - you understand IAM, KMS, VPC security, CloudTrail, GuardDuty, Security Hub, Config, and WAF at a working level, not just conceptually.\nExperience operating a vulnerability management program: scanning, prioritization, tracking, and reporting across infrastructure and application layers.\nDemonstrated ability to respond to and investigate security incidents in a cloud environment - from initial triage through containment, root cause analysis, and corrective action.\nFamiliarity with integrating security tooling (SAST, DAST, dependency scanning, container scanning) into CI/CD pipelines and developer workflows.\nWorking knowledge of HIPAA, SOC 2, and/or HITRUST requirements as they apply to technical controls - you understand what compliance requires and how to implement it in an engineering context.\nScripting proficiency in Python, Bash, or equivalent for automating security tasks, log analysis, and tooling integrations.\nStrong written and verbal communication skills - you can explain security risk and technical trade-offs clearly to both engineering peers and non-technical stakeholders.\nCollaborative, team-oriented mindset with the ability to influence security outcomes without direct authority.\nComfort operating independently in a fast-paced, high-growth startup environment where priorities shift and initiative is expected.\nPreferred Skills:\nExperience in a healthcare technology or digital health environment with direct exposure to HIPAA-regulated PHI and the controls required to protect it.\nHands-on experience with threat modeling methodologies (e.g., STRIDE, PASTA) applied to cloud-native application architectures.\nFamiliarity with penetration testing concepts and experience participating in or coordinating third-party security assessments.\nExperience with privileged access management (PAM) tooling and secrets management at scale.\nExposure to the Claritas Rx application stack: TypeScript, NestJS, PostgreSQL, React.\nExperience leveraging AI tools (including Claude) to accelerate threat hunting, automate security documentation, or streamline compliance evidence workflows.\nRelevant certifications such as AWS Security Specialty, CISSP, CISM, CEH, OSCP, CompTIA Security+, or equivalent.\nB.S. in Computer Science, Information Security, or a related discipline, or equivalent practical experience.\nJoin Us\nWe are seeking to add new expertise and perspective to our strong team of experienced professionals. We aspire to a culture of accelerated professional development through: shared learning and collaboration; a respectful and fun work environment; and employee empowerment through the effective use of technology and tools.\nWe are a highly collaborative team and prioritize opportunities to connect in person. For employees within a reasonable driving distance of each other, we host regional town hall gatherings approximately every other month. These sessions give our teams a chance to come together, share updates, and strengthen relationships beyond day-to-day work.\nIn addition to our great environment, we offer a competitive salary of $130,000 to $160,000 and benefits package and the opportunity to make a significant impact on a first-in-industry digital health solution. Please send a cover letter along with your resume when applying to the position of interest. Claritas Rx embraces diversity, equality, and transparency. We are committed to building a team that comprises a variety of backgrounds, perspectives, and talents. We believe the more inclusive we are, the better we are.\nJoin us and discover what it feels like to be part of an environment that rewards ingenuity, risk taking and smart work. It's time to fall in love with what you do!\nAt Claritas Rx, protecting our candidates is a top priority. If you're applying for a role with us, please note:\nAll legitimate opportunities are posted first on ClaritasRx.com. Check there before trusting external listings.\nWe believe in meaningful interviews: offers never come after just one phone call or form. Expect multiple video calls to get to know you.\nWe never ask for fees or payments of any kind during the hiring process.\nOur People Operations Team will handle your onboarding, and all equipment comes directly from us-no purchases required.\nLearn more about how to spot recruitment scams and protect yourself - FBI warning: https://bit.ly/4aDF5wU\nClaritas Rx is committed to transparency, integrity, and a safe hiring experience for every candidate. Learn more\nhttps://www.claritasrx.com/about/careers/","description_format":"text","description_chars":11906,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Professional development","Stock options","Unlimited PTO"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Pharmaceutical Distribution","Health Data & Interoperability"],"lifecycle":[{"event":"open","at":"2026-08-22T00:00:00Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 5 · green card filings: 1","filings_12m":5,"filings_prev_12m":8,"green_card_filings_12m":1,"median_offered_wage_usd":135000,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":95,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.946,"p_room":1,"age_days":2,"expected_fill_days":43,"reasons":["conf:5","urgency","win:early"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":160000,"is_top_pay":true},"html_url":"https://alion.io/job/claritas-rx-devsecops-engineer","json_url":"https://alion.io/job/claritas-rx-devsecops-engineer.json","meta":{"generated_at":"2026-10-17T09:07:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12002,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7965},"rest":"https://alion.io/mcp/rest/get_company?id=7965"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fclaritas-rx-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fclaritas-rx-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fclaritas-rx-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/claritas-rx-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fclaritas-rx-devsecops-engineer"}]}