Security & Infrastructure Specialist

Medtrics Lab is a healthcare education SaaS company founded in 2013. We’re committed to enhancing the operational efficiency of educational healthcare organizations. Our mission is to develop an engaged healthcare workforce that contributes to saving lives. The Medtrics platform equips healthcare providers and administrators with robust tools for data management, analysis, and streamlining operational workflow.

We are seeking a Security & Infrastructure Specialist to lead security processes and DevOps infrastructure for our Django-based SaaS platform hosted on DigitalOcean. In this role, you’ll also help drive Medtrics’ adoption of AI and large language models (LLMs) to automate and enhance security, compliance, and operational workflows.

If you’re interested in:

• Working in a dynamic, fast-paced startup environment with opportunities for professional development.
• Being part of a team dedicated to improving healthcare outcomes through technology.
• Playing a hands-on role in securing a platform used by medical schools, vet schools, and hospitals worldwide.
• Leveraging AI/LLM technology to bring next-generation automation and intelligence to DevOps and security processes.
• Bridging the gap between client security requirements and internal engineering, ensuring compliance with GDPR and other relevant standards.

Then this position might be an excellent fit for you.

Security & Compliance Leadership

• Develop and maintain robust security measures to protect our SaaS application and IT infrastructure.
• Continuously assess system vulnerabilities, conduct risk assessments, and manage security incident response processes.
• Drive GDPR compliance efforts, implementing data privacy controls and ensuring regulatory requirements are met.

DevOps & Infrastructure Management

• Oversee cloud infrastructure on DigitalOcean, optimizing server provisioning, updates, backups, and performance tuning.
• Manage and enhance CI/CD pipelines and deployment processes for the Django-based backend.
• Implement infrastructure as code and automation to improve efficiency and reliability.

AI & Automation

• Explore and implement AI-driven solutions to streamline security monitoring, compliance workflows, and DevOps processes.
• Evaluate emerging AI tools for threat detection, anomaly identification, and data analysis, improving overall security posture.
• Collaborate with leadership and engineering to identify new opportunities to leverage AI across the organization.

Client Security Assessments

• Serve as the primary technical liaison for security-related inquiries from enterprise clients.
• Complete security questionnaires, provide documentation, and confidently address client concerns and audits.
• Communicate Medtrics’ security posture, practices, and roadmap to build trust and credibility.

Policy, Training & Documentation

• Create and enforce company-wide security policies (access controls, incident response plans, etc.).
• Develop internal training materials to educate employees on best practices, fostering a security-first culture.
• Maintain clear documentation around security posture, compliance status, and incident response procedures.

Cross-Functional Collaboration

• Work with the development team to ensure secure coding practices, architecture reviews, and code audits are performed regularly.
• Coordinate with leadership to prioritize and budget for security improvements.
• Support business operations by providing input on vendor selection, contract negotiations, and third-party risk assessments.

Education

• Bachelor’s degree in Computer Science, Information Security, or a related field required; advanced degree or security certifications (CISSP, CISM, etc.) are a plus.

Experience

• 5 years of experience in information security, DevOps, or related roles.
• Demonstrated success securing and managing cloud-based infrastructures (DigitalOcean, AWS, or similar).
• Hands-on experience with common security tools (e.g., vulnerability scanners, SIEM) and DevOps pipelines (GitHub Actions, Jenkins, etc.).

Technical Skills

• Strong understanding of network and system security principles (firewalls, VPNs, intrusion detection systems).
• Proficiency with Django/Python backends and containerization technologies (Docker, Kubernetes) is highly desirable.
• Familiarity with GDPR compliance requirements and ability to implement privacy-by-design principles.
• Experience or keen interest in leveraging AI/LLMs (e.g., ChatGPT, Claude, Gemini) for process optimization and automation.
• Comfort with scripting/automation (Python, Bash, or similar) to improve security and DevOps processes.

Soft Skills

• Excellent communication and interpersonal abilities; able to explain complex security concepts to both technical and non-technical stakeholders.
• Strong organizational skills, with the ability to manage multiple projects and shifting priorities in a fast-paced environment.
• Problem-solving mindset; able to thrive in a startup setting where resourcefulness and initiative are highly valued.
  

At Medtrics, you’ll be part of a mission-driven team that’s committed to creating an engaged healthcare workforce to save lives. By joining us, you become part of a community that:

• Lives Our Mission: We’re shaping the future of healthcare education and workforce management, striving to make patient care better for everyone.
• Values Integrity, Initiative, and Impact: Our core values guide everything we do. We keep our promises, continuously improve, and focus on what truly matters—making a difference in healthcare.
• Sets Ambitious Goals: We’re on track to become the most customer-referred healthcare education company in the U.S. within three years. Over the next decade, we’re expanding internationally and into new areas of workforce management.
• Provides Growth Opportunities: As we scale globally, so will your role, responsibilities, and the potential for personal and professional development.
• Embraces a People-Centered Culture: We’re building a team of entrepreneurs, innovators, and problem-solvers who are empowered to think differently, share ideas, and challenge the status quo.
  

• Comprehensive health insurance (medical, dental, vision)
• 401k (coming early 2025)
• 3 weeks PTO, 10 holidays, and a mandatory company shutdown between Christmas Day and New Year’s Day
• Company-sponsored annual retreat
• In-office lunch (for Philadelphia-based employees)
• Commuter benefits (for Philadelphia-based employees)

Come join us and make a positive social impact! https://medtricslab.com/

• Medtrics is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status.