At Lazarus, we build foundation models to help people solve the world's toughest problems. Enterprise and government clients use our APIs to power products and workflows that keep humans focused on what we do best. We're a venture-backed team headquartered in the Boston, MA area, and we share a passion for innovation, growth, and a commitment to the responsible use of AI.
You can check out a demo of what we do here.
Job Overview
We are seeking a proactive and skilled DevOps Engineer/Red Team Specialist to join our team. This role involves managing and securing cloud environments on Google Cloud Platform (GCP), ensuring SOC 2 compliance, and deploying and maintaining CI/CD infrastructure. You will leverage tools like Atlassian, GitHub/GitLab, Rundeck, Terraform, Drata, and Datadog to deliver robust, secure, and scalable solutions. As part of the Red Team, you will identify vulnerabilities in microservices-based architecture and other critical infrastructure to improve system security and reliability.
Key Responsibilities
DevOps Responsibilities:
- Design, implement, and maintain CI/CD pipelines using GitHub, GitLab, and Rundeck.
- Automate cloud infrastructure provisioning and management with Terraform.
- Ensure optimal performance, scalability, and availability of services in GCP environments.
- Monitor infrastructure and application performance using Datadog and implement optimizations as needed.
- Collaborate with developers to integrate security into CI/CD workflows and protect microservices architecture.
Red Team & Security Responsibilities:
- Perform penetration testing and vulnerability assessments on microservices-based systems and underlying infrastructure.
- Identify and exploit vulnerabilities in applications, networks, and cloud environments.
- Design and execute attack simulation scenarios to test incident response processes.
- Collaborate with the Blue Team to strengthen detection and response capabilities.
- Develop remediation strategies and enhance the overall security posture of the organization.
SOC 2 Compliance:
- Implement and maintain SOC 2 controls, ensuring alignment with compliance requirements.
- Collaborate with stakeholders to document and enforce SOC 2 policies and procedures.
- Use Drata to automate evidence collection and streamline audit processes.
- Address compliance gaps by integrating secure practices into DevOps workflows.
Required Skills and Experience
- 3+ years of experience in DevOps, cloud infrastructure management, and security.
- Hands-on experience with Atlassian tools (Jira, Confluence), GitHub/GitLab, Rundeck, Terraform, and Datadog.
- Expertise in GCP, including services such as IAM, Security Command Center, and Compute Engine.
- Proven ability to secure and manage microservices-based architecture.
- Strong scripting and automation skills (e.g., Python, Bash).
- Familiarity with SOC 2 compliance frameworks and security best practices.
Preferred Skills
- Certifications such as GCP Professional DevOps Engineer, OSCP, or CISSP.
- Experience securing CI/CD pipelines and automating vulnerability management.
- Knowledge of incident response and disaster recovery planning for cloud environments.
Benefits
- Comprehensive benefits package, including health, dental, and vision insurance, as well as retirement savings plans
- Flexible working from home arrangements
- Opportunities for growth and professional development
- A collaborative and supportive company culture
- Access to cutting-edge technology and resources for research and development
- Salary range: 110,000-130,000 + equity + bonus
Lazarus AI is an equal opportunity employer. We are committed to equal employment opportunity and nondiscrimination for all employees and qualified applicants without regard to a person's race, color, gender, age, religion, national origin, ancestry, disability, veteran status, genetic information, sexual orientation or any characteristic protected under applicable law. We do not tolerate discrimination or harassment of any kind. This applies to every aspect of employment at Lazarus, including, but not limited to, employment, training, promotion, demotion, transfer, leaves of absence and termination.
Top Skills
What We Do
Lazarus applies artificial intelligence and computer vision to develop products and custom solutions to optimize processes. Organizations leverage our APIs to get data out of PDFs to where it needs to be, faster and more accurately than ever before:
RikAI is a large language model that extracts data from any document without training. Regardless of type, format, or language, our advanced document understanding API can contextualize information, analyze layouts, and find answers to natural language questions across any number of documents. Industries from insurance through to legal are using RikAI to use their documents intuitively.
Upload any document and ask almost any question to get the correct answer without training. To improve results, instead of increasing a “training set”, rewrite questions until they consistently yield the best results.
Lazarus Forms is a general data extraction API that makes cluttered, unstructured PDFs as usable as any JSON. Our form extractor pulls entities, tables, and key value pairs from documents without example forms or training. Recognizing both handwritten and typed text, Lazarus Forms extracts more data and requires even less human intervention. We streamline data intake and transfer processes associated with various types of documents; claims forms, new patient intake, attending physician statements, adjuster reports, lab results, ACORDs, and anything that can fit in a PDF.
