Job Summary
 

We are looking for a Senior DevOps Security Engineer to join our DevSecOps team.

As a Senior DevOps Security Engineer on our DevSecMLOps team at Alto Pharmacy, you will partner closely with engineering, IT, compliance, and security teams to advance our infrastructure security, improve developer security tooling, and integrate best-in-class security practices across our systems. Your expertise will ensure we maintain a resilient, secure, and compliant environment as we scale our patient and partner-facing platforms, including Alto Technologies. You’ll play a critical role in strengthening our DevSecOps foundation while enabling developer velocity and innovation.

Example Projects:
Implement a Kubernetes security framework to enforce workload policies, secrets management, and network controls across clusters.
Build security automation tools to scan Infrastructure-as-Code artifacts (Terraform, Helm charts) for vulnerabilities before deployment.
Design and implement automated pipelines for continuous vulnerability management and remediation across cloud infrastructure.
Lead incident response drills and create operational runbooks to improve our security readiness and incident recovery processes.
Collaborate with engineering teams to harden CI/CD pipelines and integrate security testing into the software development lifecycle.

Job Description
 

Accelerate Your Career as You

• Lead security-focused initiatives across our cloud infrastructure, CI/CD pipelines, and Kubernetes platforms to enhance Alto’s security posture.

• Implement and manage security controls, monitoring systems, and vulnerability management programs aligned to healthcare compliance needs.

• Partner cross-functionally with DevOps, MLOps, and Engineering teams to integrate security principles early into the software development lifecycle.

• Educate and mentor engineering teams on secure coding practices, DevSecOps best practices, and infrastructure hardening techniques.

A Bit About You

Minimum Qualifications:

• Bachelor’s degree in Computer Science, Computer Engineering, Information Security, or a related technical field.

• 8+ years of progressive experience in DevOps, Site Reliability Engineering, Infrastructure Security, or Information Security roles.

• Hands-on experience securing cloud environments (AWS, Azure, or GCP) and automating security operations through tools like Terraform, GitHub Actions, or Jenkins.

• Strong background in Kubernetes security, container hardening, secrets management, and network security.

• Experience with vulnerability management tools, infrastructure as code (IaC) scanning, security event monitoring (e.g., Datadog, Prometheus, or Splunk), and incident response.

Preferred Qualifications: 

• Experience operating in a highly regulated industry, particularly healthcare, and familiarity with HIPAA, PCI, SOC2, and HITRUST compliance frameworks.

• Knowledge of MLOps platforms and security of machine learning workflows (e.g., MLFlow, Kubeflow, SageMaker).

• Practical knowledge of secure coding practices in Python, GoLang, or JavaScript/TypeScript.

• Prior experience leading security initiatives within CI/CD pipelines and Infrastructure-as-Code ecosystems.

• Strong communication skills with the ability to collaborate with engineering teams and leadership to drive security initiatives.

Additional Information
 

Additional Physical Job Requirements

Physical requirements for this role include the ability to work at a computer terminal with monitor, keyboard and mouse for extended periods of time, stoop, bend, and reach for equipment and supplies, make frequent repetitive motions required to operate a computer that include the wrists, hands and fingers, and lift, carry, push, pull, and move light objects up to 20 pounds. The role also requires the ability to effectively communicate through verbal interactions, discern auditory information, and visually perceive details to perform essential job functions.

Consistent with the Americans with Disabilities Act (ADA) and similar applicable state laws, it is Alto’s policy to provide reasonable accommodation to enable qualified individuals with disabilities to perform essential job functions, unless such accommodation would cause an undue hardship.

This pos