DevSecOps Engineer

Who We Are
 

Machinify is a leading healthcare intelligence company with expertise across the payment continuum, delivering unmatched value, transparency, and efficiency to health plan clients across the country. Deployed by over 60 health plans, including many of the top 20, and representing more than 160 million lives, Machinify brings together a fully configurable and content-rich, AI-powered platform along with best-in-class expertise. We’re constantly reimagining what’s possible in our industry, creating disruptively simple, powerfully clear ways to maximize financial outcomes and drive down healthcare costs.
 

Location:
 

This role is fully remote
 

About the Opportunity
 

At Machinify, we're building a robust security program to protect our clients' sensitive healthcare data and maintain the highest standards of information security. As part of the Security team, you will serve as a technical security expert responsible for securing our cloud infrastructure, implementing DevSecOps practices, and ensuring our SaaS platforms meet the highest security standards. This role is essential to maintaining our security posture as we continue to integrate four distinct technology platforms and scale our operations.
 

As a Cloud Security Analyst, you will be primarily responsible for cloud security architecture, DevSecOps implementation, and SaaS security management across our multi-cloud environment. You'll work closely with engineering, DevOps, and IT teams to embed security throughout our development lifecycle while ensuring our cloud infrastructure remains secure and compliant with healthcare regulations.
 

What you'll do
 

Primary Responsibilities - Cloud Security & DevSecOps (70% of role):

• Design and implement cloud security architectures across AWS, Azure, and other cloud platforms
• Develop and maintain DevSecOps pipelines integrating security scanning, vulnerability assessment, and compliance checks
• Configure and manage cloud security tools including CSPM, CWPP, and cloud-native security services
• Conduct security architecture reviews for new applications, services, and infrastructure changes
• Implement Infrastructure as Code (IaC) security best practices and automated security controls
• Monitor cloud environments for security threats, misconfigurations, and compliance violations
• Manage container security and Kubernetes security configurations
• Oversee API security implementations and SaaS integration security reviews
   

Supporting Security Program Responsibilities (30% of role):

• Collaborate with engineering teams to implement secure coding practices and security testing
• Support vulnerability management programs including scanning, assessment, and remediation tracking
• Assist with security incident response and forensic analysis for cloud-based incidents
• Develop and maintain security automation scripts and tools
• Participate in security assessments and penetration testing coordination
• Create technical security documentation and architectural diagrams
• Support SOC2 and HITRUST compliance activities with technical evidence collection
• Provide security guidance for vendor integrations and third-party SaaS evaluations
• Contribute to disaster recovery and business continuity planning
• Mentor development teams on security best practices and threat modeling

Essential Qualifications
 

• Bachelor's degree in Computer Science, Information Security, Engineering, or related field, or equivalent work experience