VIVA HEALTH logo
VIVA HEALTHPosted 1 month ago

Information Security Development Engineer

On-siteBirmingham, Alabama, United States

Full TimeMedium

Job Summary

Design, implement, and maintain secure CI/CD pipelines across applications, APIs, and cloud platforms while developing infrastructure as code with security-first principles. Integrate automated security testing throughout the software development lifecycle and embed secure development practices, threat modeling, and security review gates into engineering workflows. Monitor, detect, and respond to security vulnerabilities and incidents, including remediation and root-cause analysis, while maintaining observability for systems and security events. Support regulatory compliance and contribute to audits for HIPAA, HITECH, and CMS requirements, and perform risk assessments for internal systems, cloud environments, and third-party vendors.

Required Qualifications

  • Bachelor's Degree in Computer Science, Information Security, or related field; Work experience may substitute for education requirement
  • 4+ years' experience in DevSecOps, site reliability engineering with a security focus or similar role
  • Strong experience with major cloud platforms (AWS, Azure) and cloud security best practices
  • Proven ability to build and manage CI/CD pipelines with integrated security controls (Jenkins, GitHub Actions, GitLab CI, Azure, DevOps)
  • Hands-on experience with Infrastructure as Code and configuration management (Terraform, CloudFormation, ARM/Bicep)
  • Proficiency with security tooling including SAST/DAST, dependency and container scanning, and cloud security posture management
  • Solid understanding of networking, IAM, encryption, key management, and secure architecture principles
  • Familiarity with healthcare regulations and frameworks (HIPAA, HITECH, CMS)
  • Strong communication and collaboration skills across engineering, security, compliance, and business teams

Desired Qualifications

  • CSSLP, GSSP, Security+, SSCP
  • Experience with Kubernetes and container security
  • Familiarity with SRE and resilience practices

Hiring someone like this?

Get your role in front of qualified candidates on Sorce.

Get started

Apply to this job in one click with Sorce

Apply on Sorce