Doximity is transforming the healthcare industry. Join our mission to help every physician be more productive and provide better care for their patients. As medicine's largest network in the United States, there's an elevated level of responsibility in everything we do. We don't take that responsibility lightly and are committed to building diverse teams with an inclusive culture that can make a direct impact on the healthcare system.
One of Doximity's core values is stretching ourselves. Even if you don't check off all the boxes below we encourage you to apply. Doximity is full of exceptional people that don't fit a mold, join us!
We are looking for an experienced DevOps engineer to join our Infrastructure Security team. You will contribute and own Security efforts for our entire application and infrastructure stack as well as support and build products alongside our 300+ person engineering team used by millions of medical professionals.
This role can be filled in our San Francisco Headquarters or remotely in the U.S.
How you’ll make an impact:
- Develop, schedule, and execute automated security audits on infrastructure using industry-standard security frameworks like the CIS Benchmark.
- Implement a strong security posture in our Kubernetes ecosystem that includes Terraform, Helm, and Ansible
- Manage over 50 AWS accounts including IAM permissions, VPC and networking, firewall (WAF), and edge protection.
- Actively participate in the design, implementation, and maintenance of the development, staging, and production infrastructure and application security.
- Analyze traffic using tooling and metrics to protect against malicious bots, scrapers, and attackers, while also monitoring CVEs and implementing hotfixes.
- Lead security and policy related audits such as SOC2 Type II.
- Help maintain our private security bug bounty program hosted on Hackerone: this involves engaging security researchers, validating security finds, determining impact/risk, awarding bounties, and fixing or coordinating remediation efforts.
- Work with key stakeholders to document existing security policies and create new ones.
- Actively participate in the Security Incident Response (SIR) process to triage security issues and communicate the resolution through post-mortems.
- Continuously evaluate and implement security observability tooling, both in the Kubernetes ecosystem and all supporting infrastructure.
- Periodically audit and rotate access credentials.
What we’re looking for:
- Extensive AWS knowledge and experience
- Solid understanding of Kubernetes and Helm
- Experience with configuration and resource management tools such as Terraform and Ansible
- Experience with CI and CD using tools such as Github Actions, Atlantis, CircleCI
- Proactively identify areas for improvement and produce action plans
Nice to haves:
- Experience writing application and/or security penetration tests with an open-source framework.
- Experience working with AWS based ingress systems like ELB’s and Cloudfront
- Intermediate to advanced experience administering a WAF
- Experience with Grafana Stack: Prometheus, Loki, and Tempo.
Additional Role Expectations:
- You’ll be asked to maintain a minimum of 5 hours overlap with 9:30 to 5:30 PM Pacific time.
- Participate in a 1-week on and 4 weeks off, business hours on-call rotation.
- Travel to company offsites once/quarter is expected
Compensation
The US total compensation range for this full-time position is $135,000 - $185,000 (inclusive of salary + equity). Our ranges are determined by role and level. The range displayed on each job posting reflects the approximate total target compensation for the position across the US. Within the range, individual pay is determined by factors including relevant skills, experience, and education/training. Please note that the compensation listed does not include benefits.
More on /Benefits/Perks
Doximity is proud to offer industry-leading benefits to our full time employees. Some of our offerings include:
- Medical, dental, vision offerings for you and your family
- 401k with matching program
- Employee stock purchase plan
- Family planning support, Childcare FSA, and parental leave
- Life, AD&D, and Disability
- Generous time off, holidays and paid company trips
- Wellness benefits…plus many more!
More About Doximity…
For the past decade, it’s been our mission to help every physician be more productive so they can provide better care for their patients. We believe that when doctors are connected, the healthcare system works better and patients benefit. Doximity enables our verified clinician members to collaborate with colleagues, stay up-to-date with the latest medical news and research, manage their careers, and conduct virtual patient visits. Today, Doximity is the leading digital platform for U.S. medical professionals, with over 80% of physicians, 50% of all nurse practitioners and physician assistants, and 90% of graduating medical students as members.
Joining Doximity means being part of an incredibly talented and humble team passionate about improving inefficiencies in our $4.3 trillion U.S. healthcare system. We are a team of doers who solve problems everyday by treating obstacles like an adventure, and we love creating technology that has a real, meaningful impact on people’s lives. Doxers are committed to working towards a more equitable world both within and beyond our office walls. This starts by fostering an inclusive and diverse work environment where differences are valued and all employees are encouraged to bring their full, authentic selves to work daily. To learn more about our team, culture, and users, check out our careers page, company blog, and engineering blog. We’re growing fast, and there’s plenty of opportunity for you to make an impact—join us! For more information, visit Doximity.com.
____________________________________________
EEOC Statement
Doximity is proud to be an equal opportunity employer, and committed to providing employment opportunities regardless of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, pregnancy, childbirth and breastfeeding, age, sexual orientation, military or veteran status, or any other protected classification. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law.
