About Us:

Redica Systems is a SaaS start-up serving more than 200 customers within the life science sector, with a specific focus on Pharmaceuticals and MedTech. Embracing a hybrid model, our workforce is distributed globally, with headquarters in Pleasanton, CA.

Redica's data analytics platform empowers companies to improve product quality and navigate evolving regulations. Using proprietary processes, we harness one of the industry's most comprehensive datasets, sourced from hundreds of health agencies and the Freedom of Information Act.

Our customers use Redica Systems to more effectively and efficiently manage their inspection preparation, monitor their supplier quality, and perform regulatory surveillance.

The Role:

We're seeking a security professional with 3-5 years of experience in securing cloud infrastructure, automating compliance processes, and managing risks to support SOC 2, ISO 27001, and GDPR standards. This role emphasizes integrating security into CI/CD pipelines, mitigating vulnerabilities, and ensuring AWS environments maintain the highest security benchmarks.

Key Responsibilities:

- Integrate security controls into AWS CI/CD pipelines to support secure software delivery.

- Implement and maintain secure Infrastructure as Code (IaC) using Terraform and CloudFormation.

- Configure and monitor AWS security services, including GuardDuty, Security Hub, IAM, KMS, WAF, and CloudTrail.

- Support container security across Amazon ECS and EKS environments.

- Perform vulnerability management, remediation, patch management, and endpoint security activities.

- Implement and maintain identity and access management controls, including IAM, SSO, MFA, and secrets management.

- Support SOC 2, ISO/IEC 27001, GDPR, customer security assessments, and internal/external audits.

- Monitor security events, investigate alerts, and assist with incident response and remediation.

- Maintain security documentation, standards, and operational procedures.

- Collaborate with Engineering, IT, HR, and other teams to implement and maintain security controls across the organization.

- Use AI tools to improve code quality, debugging, and documentation; track where AI is meaningfully improving your output.

About You:

- Tech Savvy: Effectively anticipates and adopts innovations in business-building technology solutions, staying up-to-date with advancements and incorporating them into work processes, and uses AI tools to enhance code quality, speed, and documentation.

- Manages Complexity: Actively synthesizes solutions from complex information by identifying patterns and developing effective problem-solving strategies.

- Decision Quality: Consistently makes good and timely decisions that propel the organization forward and keep the organization's DevOps processes running smoothly and efficiently.

- Collaborates: Actively engages in collaborative problem-solving by leveraging diverse perspectives and finding innovative solutions.

- Drives Results: Strives to continuously improve performance and exceed expectationsnecessary for meeting the continuous delivery demands, even under tough circumstances.

- Optimizes Work Processes: Actively seeks opportunities to enhance and streamline current work processes for deploying and maintaining tech/applications.

- Nimble Learning: Engages in experimentation, learns from both successes and failures and uses those insights to refine problem-solving skills, staying up-to-date with evolving SaaS technologies and practices.

- Engaged: Not only shares our values but also possesses the essential competencies needed to thrive at Redica, as outlined here.

Qualifications:

- BA/BS degree in CS or a related technical field, or equivalent practical experience.

- 3-5 years of experience in securing cloud infrastructure, automating compliance processes, and managing risks to support SOC 2, ISO 27001, and GDPR standards.

- Cloud Security: Proficiency in AWS Security services, including GuardDuty, WAF, Inspector, Security Hub, VPC, IAM.

- Infrastructure as Code: Hands-on experience with Terraform, CloudFormation, AWS Config, Control Tower.

- CI/CD Tools: Familiarity with AWS Code Pipeline, Jenkins, and GitHub for secure software delivery.

- Compliance Frameworks: Strong understanding of SOC 2, ISO 27001, GDPR, NIST, CIS AWS Benchmarks.

- Antimalware Solutions: Experience with TrendMicro and GuardDuty for threat detection and prevention.