Cloud Security Engineer - WAF Specialist

Datavant is the data collaboration platform trusted for healthcare. Guided by our mission to make the world’s health data secure, accessible and actionable, we provide critical data solutions for organizations across the healthcare ecosystem - including providers, health plans, researchers, and life sciences companies. From fulfilling a single patient’s request for their medical records to powering the AI revolution in healthcare, Datavanters are building the future of how data is connected and used to improve health. By joining Datavant today, you’re stepping onto a driven and highly collaborative team that is passionate about creating transformative change in healthcare. What We’re Looking For As a Cloud Security Engineer within the Secure Product & Infrastructure program, you will help operationalize Datavant’s Edge Defense and WAAP capabilities across our environments. This is a hands-on, execution-focused role with significant engagement with Engineering teams. You will work directly with application and platform engineers to onboard services to edge protections, tune controls, and ensure internet-facing workloads are consistently secured. You are responsive, practical, and comfortable operating in service-oriented environments where partnership and clarity matter. What You Will Do Onboard applications and APIs to the WAAP platform, partnering directly with Engineering teams to ensure secure and smooth rollout. Implement and tune WAF protections across supported platforms, reducing false positives while maintaining strong protection coverage. Respond to edge protection and WAF-related engineering requests, troubleshooting configuration issues and advising on secure implementation patterns. Contribute to Terraform modules and automation pipelines that standardize edge protections and reduce configuration drift. Review infrastructure changes with a security lens and collaborate with engineers to land secure solutions. Participate in incident response and post-incident hardening related to edge-layer detections. Document onboarding processes and configuration standards to improve repeatability and reduce manual effort. What You Need to Succeed Experience working in at least one major cloud provider and familiarity with web application firewall or edge protection concepts. Hands-on experience with infrastructure-as-code (e.g., Terraform) and Git-based workflows. Strong customer-service orientation and comfort working directly with Engineering teams in high-engagement environments. Ability to balance protection with usability, tuning controls thoughtfully to minimize friction. Solid understanding of secure SDLC practices and ability to communicate infrastructure and application risks clearly. Strong written and verbal communication skills. Comfort operating in regulated environments and aligning implementation details with compliance requirements. Familiarity with AI-assisted development tools is encouraged. You are open to using them to accelerate infrastructure and security work while maintaining appropriate validation discipline. What Helps You Stand Out You have implemented and tuned WAAP or WAF controls in production environments. You have improved or standardized infrastructure patterns to reduce drift and increase repeatability. You are trusted to independently own moderately scoped security initiatives. You have experience working in regulated environments and understand how operational security maps to compliance. To ensure the safety of patients and staff, many of our clients require post-offer health screenings and proof and/or completion of various vaccinations such as the flu shot, Tdap, COVID-19, etc. Any requests to be exempted from these requirements will be reviewed by Datavant Human Resources and determined on a case-by-case basis. Depending on the state in which you will be working, exemptions may be available on the basis of disability, medical contraindications to the vaccine or any of its components, pregnancy or pregnancy-related medical conditions, and/or religion. This job is not eligible for employment sponsorship. Datavant is committed to a work environment free from job discrimination. We are proud to be an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status. To learn more about our commitment, please review our EEO Commitment Statement here. Know Your Rights, explore the resources available through the EEOC for more information regarding your legal rights and protections. In addition, Datavant does not and will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay. At the end of this application, you will find a set of voluntary demographic questions. If you choose to respond, your answers will be anonymous and will help us identify areas for improvement in our recruitment process. (We can only see aggregate responses, not individual ones. In fact, we aren’t even able to see whether you’ve responded.) Responding is entirely optional and will not affect your application or hiring process in any way. Datavant is committed to working with and providing reasonable accommodations to individuals with physical and mental disabilities. If you need an accommodation while seeking employment, please request it here, by selecting the ‘Interview Accommodation Request’ category. You will need your requisition ID when submitting your request, you can find instructions for locating it here. Requests for reasonable accommodations will be reviewed on a case-by-case basis. For more information about how we collect and use your data, please review our Privacy Policy.