Security Automation and Compliance Co-op

Who we are

Zus is a shared health data platform designed to accelerate healthcare data interoperability by providing easy-to-use patient data via API, embedded components, and direct EHR integrations. Founded in 2021 by Jonathan Bush, co-founder and former CEO of athenahealth, Zus partners with HIEs and other data networks to aggregate patient clinical history and then translates that history into user-friendly information at the point of care. Zus's mission is to catalyze healthcare's greatest inventors by maximizing the value of patient insights - so that they can build up, not around.

What We're Looking For
Security is central to Zus's mission to bring information speed to health care. As part of our compliance and security team, you'll help drive the automation of the monitoring Zus (AWS) cloud security posture, build data pipelines and integrations to our Governance-Risk-Compliance platform to capture evidence on our security controls, partner with engineering teams to capture metrics on technical operations, and ensure alignment with auditors and framework requirements.

We're looking for someone comfortable with tackling a diverse set of responsibilities and who can communicate effectively with the rest of the organization.

As part of our team, you will

• Help with Regulatory Compliance (SOC2, HITRUST), maintaining and automating an auditable security posture
• Track KPI around security, and help steer the strategy of how the InfraSec team uses and responds to these signals
• Improve CI/CD tools integration/operations, and full automation of CI/testing
• Participate in Risk Assessment sessions, and help document, capture, and prioritize remediation or improvements
• Cloud security (AWS): help improve security posture by researching and implementing configurations, fixes, or third-party services
• Work with other engineering teams to develop or improve cloud infrastructure, remediate security vulnerabilities or improve logging, monitoring and metric capabilities

You're a good fit because you have

• A passion for information, coding, cloud computing, and implementing data pipelines
• Understanding of and heavy interest inAWS compute and networking resources (ALB, S3, EC2, ECS, etc.)
• A desire to learn and steward Infrastructure-as-Code (we primarily use Terraform)
• Knowledge of and interest in working with Continuous Deployment
• Familiarity with CI/CD pipeline tools (we primarily use GitHub Actions) to achieve repeatable, idempotent, secure and monitored pipelines of code deployments
• General awareness and knowledge of cybersecurity principles
• Familiarity with Linux and the command line and coding: shell/bash, nodeJS, python (not necessary these languages, but the willingness to learn languages/frameworks to accomplish guided tasking)
• A self-starter attitude that shows that you are ready for the fast, and sometimes unstructured, nature of an early stage startup, and can get things done independently
• An effective communicator, and the willingness to level up in technical writing and communication (intra-team, customer, vendor, and leadership)

$25 - $28 an hour

This person will need to be in Boston at least 3 days per week. This co-op will run from early January to late June. This person will report to our Manager, InfoSec and Compliance.

We will offer you...

• Competitive compensation that reflects the value you bring to the team
• Opportunity to work alongside a passionate team that is determined to help change the world (and have fun doing it).

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.