At Sofia we want to improve the way millions of people care for their health. We're first and foremost a health company. We currently offer health insurance plans for individuals, families and companies. Our plans are more complete, simpler to understand and provide a more personal service for everyone committed to their health.
About the role The Security and Devops function at Sofía is dedicated to advancing the security and reliability of our systems and data. You will collaborate across departments to implement security and compliance measures, develop and maintain infrastructure, and respond to potential threats promptly.
In this role, you will not only lead by example and provide guidance to a team of skilled engineers but also take a hands-on approach to security and devops. This position is key to ensure that we remain at the forefront of best practices in cybersecurity and devops. Your expertise will help safeguard our users' data and maintain the trust that Sofía's stakeholders place in our company.
What you'll do 1. Be responsible and improve our systems security, this may include: Maintain and level up our Anual Security Program, to continue closing the gap vs. ISO 27001 and HIPPA compliance. And eventually, get Sofía certified. Respond to security information requests from auditors or external parties. Coordinate our external pentesting projects (and/or manage a bug bounty program). Carry out frequent phishing exercises, and more generally, train the team vs. social engineering attacks. Identify security best practices and promote them across the engineering team and beyond. Drive and sometimes implement specific security features in our product. 2. Drive (and implement) initiatives to improve our base infrastructure, this may include: Evaluate and improve our PaaS set-up and propose improvements. Maintain and improve our development environment. Maintain and improve our continuous deployment procedures. What we're looking for Our ideal Sr. Security and Devops Engineer has: At least 5 years of experience in Security and/or Devops. And it would be ideal if they: Have experience with Heroku, Vercel and AWS. Have worked at a security team on a startup at series B or C. Are comfortable doing backend development with Python. Our process Cultural screening ft. Max , from People & Culture Semi technical screening #1 ft. Mani , Co-founder & CTO Semi technical screning #2 ft. David , Backend Engineer Last screening ft. Arturo , Co-founder & CEO and Sebo , Co-founder & CPO. *Our selection processes usually last between 3 to 4 weeks. In some cases, we may need to add an additional stage if we require further clarity. Work on an ambitious mission to improve how people take care of their health.
Intentional freedom. We believe in a flexible environment where you have the freedom to make your job match your lifestyle and own those decisions.
A driven and talented team that will challenge you to go further everyday.
20 flexible vacation days per year + official holidays.
#J-18808-Ljbffr
