This job post is closed and the position is probably filled. Please do not apply. Work for Doximity and want to re-open this job? Use the edit link in the email when you posted the job!
Why work at Doximity?\n\nDoximity is the leading social network for healthcare professionals with over 70% of U.S. doctors as members. We have strong revenues, real market traction, and we're putting a dent in the inefficiencies of our $2.5 trillion U.S. healthcare system. After the iPhone, Doximity is the fastest adopted product by doctors of all time. Our founder, Jeff Tangney, is the founder & former President and COO of Epocrates (IPO in 2010), and Nate Gross is the founder of digital health accelerator RockHealth. Our investors include top venture capital firms who've invested in Box, Salesforce, Skype, SpaceX, Tesla Motors, Twitter, Tumblr, Mulesoft, and Yammer. Our beautiful offices are located in SoMa San Francisco.\n\nThis position is for an experienced DevOps engineer, to own Security efforts for our entire application stack, to join our 8 person DevOps team. We’re looking for someone with a strong track record in building infrastructure, maintaining high level of uptime and optimal security. You will be supporting and building products alongside our 50+ person engineering team used by hundreds of thousands of people.\n\nSkills & Requirements\n\n-Minimum of 5 years of Linux/UNIX systems engineer & administrator experience.\n-Minimum of 5 years of relevant web application security experience\n-Extensive AWS experience\n-Experience writing application security penetration tests with an open source framework.\n-Automation experience with configuration management tools such as Chef, Ansible, or Puppet.\n-Intermediate to advanced experience administering and securing an RDB (MySQL or Postgres a plus)\n-Proficient in bash shell scripting (sed + awk) and one of Ruby or Python.\n-Experience automating application deployments with Capistrano or Jenkins.\n-Ability to work in a proactive manner and manage your own queue.\n-Experience with Hashicorp tools, Neo4j, Elasticsearch, Kibana, Grafana is a big plus.\n\nTypical Tasks\n\n-Develop, schedule, and execute automated security audits on infrastructure using industry standard security frameworks and tooling.\n-Write penetration tests for applications and services.\n-Periodically audit and rotate access credentials.\n-Document current and future security procedures and policies in the wiki.\n-Lead security/policy related audits such as SOC2 Type II (annual renewal).\n-Work with sales and client services teams to answer infrastructure related security questions and concerns that clients inquire about.\n-Remediate and write post-mortem reports on security-related issues.\n-Active involvement in design, implementation, and maintenance of the development, staging, and production infrastructure security.\n-Work on automating tasks using Jenkins.\n-Troubleshoot system issues (such as high-load, memory, CPU usage, etc.) and come up with temporary/long-term solutions based on the root cause.\n-Work with developers to deploy applications ready for production (Terraform, Consul, Vault, Upstart, NGINX, Sensu). We believe in infrastructure as code and follow it.\n-Write Chef cookbooks (using "Berkshelf Way") to automate configuration management.\n-Participate in a 1-week on 7-week off, 24/7 on-call rotation.\n-Hands-on maintenance on our Ruby on Rails and Go (Golang) applications.\n-Troubleshoot issues across the whole stack: hardware, software, and network.\n\nA few facts about us\n\n-We deploy our applications to production on average 25 times per day.\n-We have over 250 private repositories in Github, ranging from forks of gems, our own internal gems as well as auxiliary applications.\n-Our production stack is hosted on AWS and QA clusters on DigitalOcean.\n-Hundreds of thousands of healthcare professionals will utilize the products you build.\n-We host unstructured "hack days" periodically, which is time reserved for you to scratch a code itch.\n-A couple times a year we run a co-op where you can pick a few people you'd like to work with and drive a specific company goal.\n-Every new engineer ships code to production on day one. Our mentorship program ensures you're immersed in the team's culture early on.\n\nAbout the Technical Stack\n\nDoximity's web applications are built primarily using Ruby, Rails, Javascript, and a bit of Go. Our applications are used by hundreds of thousands of Physicians and Healthcare professionals, and we also have a suite of mobile applications for iOS and Android. We like to think pragmatically in choosing the tools most appropriate for the job at hand. More details about our engineering stack on the Doximity engineering blog. \n\nPlease mention the words **FIGURE GHOST LANGUAGE** when applying to show you read the job post completely (#RMjE2LjczLjIxNi4w). This is a feature to avoid spam applicants. Companies can search these words to find applicants that read this and see they're human.\n\n \n\n#Salary and compensation\n
No salary data published by company so we estimated salary based on similar jobs related to DevOps, InfoSec, Elasticsearch, Python, Ruby, Senior, Engineer, Linux, Ansible, Grafana, Mobile and Sales jobs that are similar:\n\n
$70,000 — $125,000/year\n
Frontpage
🏝 Remote jobs
🌗 Dark mode
👩💻 Hire remote workers
🚨 Post a remote job
🍱 Compact mode
✍️ Remote work blog new
Health insurance for teams
Hacker News mode
Safe for work mode
