Overview

At DrAnsay we are building digital medical services that make healthcare more accessible, efficient, and scalable. Our platform connects technology, medical expertise, and data-driven decision-making to deliver real value for patients and providers — at scale and across markets.

As a fast-growing HealthTech company, Security is becoming a key pillar of our engineering organization — and you will play a central role in shaping it.

You will join a modern, cloud-native environment built on:

TypeScript, Node.js, tRPC, gRPC, REST APIs

We are looking for a hands-on Security Specialist who wants to bring their expertise into this stack and actively shape how security is embedded across architecture, development, and infrastructure.

Your Mission

Take ownership of application and cloud security across our services, APIs, mobile apps, and Kubernetes-based GCP infrastructure, ensuring pragmatic, scalable, and developer-friendly security standards.

You will work closely with engineering and leadership, contribute to architectural decisions, and have high visibility across the organization while remaining deeply hands-on.

Your Responsibilities

Conduct hands-on penetration testing (Node.js/TypeScript, APIs, iOS/Android), including tools such as Burp Suite
Identify and remediate vulnerabilities (e.g., auth bypass, injection, deserialization flaws)
Define and implement secure API standards (JWT/OAuth, TLS/mTLS, validation, rate limiting, CORS)
Establish and continuously improve Secure SDLC practices (threat modeling, reviews, SAST/DAST in CI/CD)
Implement automated monitoring (eBPF, Falco) and support incident response
Contribute to GDPR, ISO 27001, and SOC 2 initiatives

This role offers a high level of ownership and autonomy. You will have the space to bring in your ideas, introduce pragmatic improvements, and shape security standards in a growing engineering organization.

Your Profile

Solid hands-on experience in application and/or cloud security
Experience with Kubernetes and GCP
Strong understanding of API security (OWASP API & Mobile Top 10)
Experience securing Node.js/TypeScript systems
Comfortable working independently and driving initiatives forward

Nice to have

CISSP, CKS, CCSP, OSCP | Container scanning | GCP IAM | Automation scripting

What We Offer

Remote work & flexible setup
A role with real ownership and strong visibility
High impact in a high-growth environment

#J-18808-Ljbffr