Get Well

DevOps Engineer

• Review, improve, and help design secure architectures across AWS and Microsoft Azure environments.
• Implement and maintain cloud security controls related to IAM, network segmentation, encryption, logging, key management, backups, secure configuration, and access control.
• Identify and remediate cloud misconfigurations, excessive permissions, insecure storage, public exposure, weak logging, and missing security controls.
• Partner with engineering and infrastructure teams to integrate security checks and DevSecOps practices into CI/CD workflows.
• Operate and improve vulnerability management processes, including scanning, validation, prioritization, remediation tracking, reporting, and exception review.
• Use security monitoring and telemetry platforms to support alert triage, endpoint visibility, log review, investigation, and detection improvement.
• Support compliance monitoring, evidence collection, control mapping, and audit readiness activities using Vanta and Compyl.
• Map technical controls to compliance requirements, internal policies, customer security expectations, and audit evidence needs.
• Participate in threat modeling and security reviews for new applications, infrastructure changes, cloud deployments, and third-party integrations.
• Support incident response activities, including alert investigation, log analysis, evidence gathering, containment recommendations, and post-incident improvements.
• Improve identity and access management practices, including least privilege, MFA, conditional access, service principals, role reviews, privileged access controls, and access certification support.
• Create and maintain security documentation, cloud security standards, control narratives, runbooks, remediation procedures, and architecture diagrams.
• Support implementation and maintenance of security benchmarks and frameworks such as CIS, NIST, SOC 2, ISO 27001, HIPAA, FedRAMP Moderate, and HITRUST.
• Translate security and compliance requirements into practical technical tasks for engineering, IT, and infrastructure teams.

Cloud Security Engineer, DevSecOps Engineer