Senior DevSecOps / Cloud Security Engineer

About Propela Tech 

Propela Tech is a healthcare-focused advisory and technology firm that helps organizations streamline operations, unlock their data, and scale more efficiently through custom-built tools. We’re a team of technologists, former healthcare operators, and strategic thinkers who understand the real-world complexity of running healthcare businesses—and we build solutions that actually work. 

 

What We’re Looking For 

This role reports directly to our Chief Solutions Officer and Co-Founder, Steven Feld. 

 

We are seeking a highly practical, hands-on DevSecOps / Cloud Security Engineer to strengthen and execute our security posture across our cloud infrastructure and development environments. 

This role is focused on execution, not theory. Unlike traditional security leadership roles centered around policy and oversight, this position is responsible for identifying security gaps and directly implementing the infrastructure, tooling, and policies required to address them. 

 

The ideal candidate is a builder and problem solver who understands how to improve security without disrupting production systems, client environments, or development velocity. 

You will work closely with engineering and DevOps teams to ensure security improvements are deployed safely, incrementally, and without service downtime. 

Key Responsibilities 

Cloud Infrastructure Security 

Implement and enforce security best practices across our AWS infrastructure 

Harden cloud environments through improvements to IAM policies, network controls, and service configurations 

Implement least privilege access models for users, services, and environments 

Identify and remediate security gaps across cloud infrastructure and environments 

 

DevSecOps Implementation 

Integrate security practices into CI/CD pipelines and development workflows 

Implement automated security checks including vulnerability scanning, secrets detection, and dependency monitoring 

Ensure infrastructure and application environments follow secure configuration standards 

 

Security Gap Identification & Remediation 

Perform ongoing reviews of infrastructure, systems, and processes to identify security gaps 

Select and deploy appropriate security tools or configurations to address identified risks 

Implement monitoring, logging, and alerting for security-relevant events 

 

Operational Security Improvements 

Implement new infrastructure policies (for example IAM or access restrictions) in ways that avoid production disruption 

Plan and execute staged rollouts of security improvements 

Collaborate with engineering teams to ensure security changes align with development workflows 

 

Compliance & Monitoring 

Support security requirements related to healthcare environments and data protection 

Maintain infrastructure visibility through logging, monitoring, and audit tooling 

Assist with security posture improvements tied to SOC2 / HIPAA-style compliance frameworks 

 

Operating Philosophy 

Security must work within the realities of a live production environment. This role requires a pragmatic mindset that balances risk mitigation with operational continuity. The ideal candidate understands how to improve security without breaking systems, slowing teams down, or disrupting client environments. 

 

Security improvements should be implemented through thoughtful rollout strategies, staged changes, and safe infrastructure practices. 

 

Qualifications 

Required Experience 

3+ years experience in DevOps, DevSecOps, Cloud Infrastructure, or Security Engineering 

Strong hands-on experience securing AWS infrastructure 

Experience implementing IAM policies, network security, and infrastructure hardening 

Experience working in live production environments with uptime requirements 

Experience deploying or managing security tooling and monitoring systems 

 

Technical Skills 

Experience with several of the following: 

AWS security controls (IAM, VPC, CloudTrail, GuardDuty, etc.) 

Infrastructure as Code (Terraform or similar) 

CI/CD security integration 

Secrets management 

Vulnerability scanning 

Logging and monitoring platforms 

Scripting or automation (Python, Bash, etc.) 

 

Preferred Experience 

Experience supporting SOC2, HIPAA, or regulated environments 

Experience working in high-growth startup or product engineering environments 

Background in DevOps, SRE, or platform engineering 

 

What Success Looks Like 

Security risks are identified and resolved quickly 

Infrastructure becomes progressively more hardened and resilient 

Security improvements are deployed without service downtime 

Engineering teams can continue to move quickly while maintaining strong security practices 

 

We are looking for engineers who value practical problem solving, ownership, and real-world impact. 

We are particularly interested in candidates who have previously worked in DevOps or infrastructure engineering roles and later specialized in security, as this role requires both operational awareness and hands-on implementation. 

 

Our Core Values 

At Propela Tech, we look for team members who embody our values every day: 

Solution-Oriented: We tackle every challenge with a problem-solving mindset. 

Extreme Ownership: We take full responsibility for our work, outcomes, and commitments. 

Grit, Speed & Results: We move fast, stay resourceful, and focus relentlessly on outcomes. 

Show Up Strong: We bring our best selves and elevate the team. 

 

Benefits

Competitive salary ($130,000 - $150,000), commensurate with experience

Health, dental, and vision insurance

Paid time off

Opportunities for rapid growth and leadership

How to Apply

Ready to build meaningful software with a mission-driven team? Attach your resume and a short note telling us why you're a great fit.

Propela Tech is an equal opportunity employer.

We value diversity and are committed to creating an inclusive environment for all team members.