Senior DevSecOps Engineer at Vida Health

United States

Vida Health Logo
Not SpecifiedCompensation
Senior (5 to 8 years)Experience Level
Full TimeJob Type
UnknownVisa
HealthcareIndustries

Requirements

  • Bachelor’s Degree in Computer Science, Engineering or related field - or equivalent practical experience
  • 6+ years of experience in DevOps, Cloud Infrastructure or Security Engineering roles, including production support
  • Strong hands-on expertise with GCP (preferred) or another major public cloud (AWS, Azure)
  • Deep experience managing infrastructure via Terraform or similar IaC tools
  • Demonstrated knowledge of container orchestration and Kubernetes security best practices
  • Experience securing CI/CD pipelines using tools like GitHub Actions, Jenkins or GitLab CI
  • Strong familiarity with application and dependency scanning tools (e.g., Snyk, Trivy, Dependabot)
  • Proficiency in Python, Go or Bash scripting for automation and tooling
  • Experience implementing Zero Trust, network segmentation and service identity-based access controls
  • Hands-on knowledge of monitoring and observability platforms (e.g., Datadog, Prometheus, Grafana)
  • Understanding of security compliance frameworks (HIPAA, HITRUST, SOC 2)

Responsibilities

  • Own the security posture of Vida’s cloud infrastructure, implementing best practices for regulated environments (HIPAA, HITRUST)
  • Manage and enhance infrastructure-as-code (Terraform) for GCP, ensuring configurations adhere to least privilege and zero trust principles
  • Implement and maintain monitoring, logging and alerting frameworks across production systems using tools like Datadog, Prometheus and GCP Cloud Logging
  • Oversee vulnerability management, including patching, dependency scanning and automated remediation workflows
  • Partner with engineering teams to embed security controls within CI/CD pipelines (GitHub Actions or similar), aligning with secure software development lifecycle (SSDLC) practices
  • Conduct threat modeling and risk assessments for new services and architecture changes
  • Manage and optimize container security in Kubernetes (GKE), including image scanning, runtime protection and secrets management
  • Collaborate with compliance teams on audit evidence automation and support for security certifications (HITRUST, SOC 2, etc.)
  • Lead incident response and postmortem analysis for security-related events
  • Mentor Engineers on secure development and deployment practices, fostering a culture of security by design

Skills

Key technologies and capabilities for this role

TerraformGCPDevSecOpsHIPAAHITRUSTInfrastructure as CodeCloud Security

Questions & Answers

Common questions about this position

What is the employment type for this Senior DevSecOps Engineer role?

The position is Full Time-Exempt.

Is this a remote position, and are there location restrictions?

Vida is authorized to do business in many but not all states, and eligibility requires being located in or able to work from a state where Vida is registered.

What key skills and technologies are required for this role?

Required skills include Terraform for GCP infrastructure-as-code, Kubernetes (GKE) for container security, Datadog/Prometheus/GCP Cloud Logging for monitoring, CI/CD with GitHub Actions, and expertise in HIPAA/HITRUST compliance and zero trust principles.

What is the company culture like at Vida Health?

This information is not specified in the job description.

What makes a strong candidate for this Senior DevSecOps Engineer position?

A strong candidate thrives at the intersection of security, cloud infrastructure, and automation, with experience building scalable, compliant systems for regulated data like HIPAA/HITRUST, and enjoys mentoring engineers on secure practices.

Vida Health

Personalized healthcare programs using technology

About Vida Health

Vida Health provides personalized healthcare programs targeting conditions like diabetes, obesity, depression, and hypertension. The company combines human-centered care with technology, employing registered dietitians, physicians, expert coaches, and therapists who connect with clients through video chats. This personal interaction is enhanced by customized digital interventions and educational content, which are tailored to each member's needs using machine learning and data from devices like glucose monitors and fitness trackers. Vida Health stands out from competitors by adopting a pay-for-performance model, where it only receives payment if it successfully helps clients improve their health outcomes. This commitment to results has led to significant improvements in medication adherence, weight loss, and reductions in depression among users.

San Francisco, CaliforniaHeadquarters
2014Year Founded
$210.6MTotal Funding
LATE_VCCompany Stage
AI & Machine Learning, HealthcareIndustries
501-1,000Employees

Risks

Increased competition from similar digital health platforms threatens Vida Health's market share.
Data privacy concerns could impact consumer trust in Vida Health's services.
Regulatory scrutiny on digital health solutions may increase compliance costs for Vida Health.

Differentiation

Vida Health combines mental and physical health treatment in a single platform.
The company offers a pay-for-performance model, ensuring accountability for health outcomes.
Vida Health integrates with over 100 devices and apps for personalized care.

Upsides

Growing demand for virtual mental health services boosts Vida Health's market potential.
Partnerships with large employers enhance Vida Health's reach and credibility.
Advancements in AI improve Vida Health's personalized healthcare offerings.

Land your dream remote job 3x faster with AI