Eko

Design and maintain cloud infrastructure, CI/CD pipelines, and observability systems using infrastructure-as-code, while improving software supply-chain security and mentoring engineers. | Requires 5+ years in DevOps or infrastructure engineering, deep cloud and IaC knowledge, scripting proficiency, and hands-on container orchestration and CI/CD experience. | About Eko Health Eko builds AI and digital tools to enable every healthcare provider to more accurately detect heart and lung disease – the leading causes of death globally. Our FDA cleared, industry leading products are used by hundreds of thousands of clinicians on millions of patients around the world. With Eko, clinicians can detect cardiac and pulmonary disease with higher accuracy, diagnose with more confidence, manage treatment effectively, and ultimately give their patients the best care possible. We have strong venture capital backing from investors like Artis Ventures, Questa Capital, Highland Capital, and Mayo Clinic Ventures. Recognized by TIME magazine in 2025 as one of the world’s top healthcare technology companies, Eko is one of the fastest growing digital health companies with products used around the world at some of the most prestigious health systems. We have more than 8 FDA clearances including novel AI algorithms, and we invest heavily in quality clinical research and R&D to build and validate exceptional products for patients we care deeply about. We’ve built a mission driven, high performing, talented, and diverse team of engineers, physicians, PhD’s, creatives, and technologists. We are committed to investing in each other and our mission to ensure all patients have access to high quality care. We are headquartered in Emeryville, California and privately-held with world class investors and partners. About The Role Eko Health is hiring a Senior DevOps Engineer to maintain and evolve the infrastructure, CI/CD, and deployment systems that support our cloud services and mobile applications. The role also carries meaningful SRE and SecOps responsibilities. Today, AWS infrastructure and CI/CD pipelines are handled by the engineering team itself. You would become the person the team turns to for deployments and for keeping servers running. You will help define processes, build security and reliability into our AWS infrastructure and delivery pipelines, and act as one of the first lines of defense when critical events and issues arise. The work centers on backend infrastructure and DevOps, mostly with Terraform. You will stay closely connected to backend application development, databases, and APIs. That work supports Eko's hardware, software, and AI products in human and veterinary health. Early Projects & Initiatives Mature and upgrade the deployment pipeline. Make sure cloud infrastructure continues to goes through the appropriate security processes. Because the team has shared infrastructure work until now, a valuable first step is turning that shared knowledge into documented, codified practices, including runbooks and system design decisions. About The Team You will join a team of 5 engineers that report to a team lead. The others on the team are full stack engineers, with some focusing on backend and others in frontend engineering. The team has shared AWS, CI, and CD responsibilities. This hire will take on that ownership and work with the engineers who currently handle it. Essential Functions Design, build, and maintain cloud infrastructure, container orchestration, cloud security posture, and observability monitors/alerts using infrastructure-as-code frameworks and best practices Create and maintain CI/CD pipelines to build, test, artifact and deploy continuously merged code Build self-service tooling and paved paths to enable downstream engineers to ship without infrastructure expertise Upgrade security and vulnerability scanning into our CI/CD layer and help coordinate the triaging of deficiencies Help harden the software supply chain with artifact signing, SBOM generation, and properly configured build runners Partner with security/compliance on audits and evidence collection for SOC2/HIPAA/ISO 27001 as applicable Participate in incident responses that lead to blameless postmortems with tracked follow-ups Mentor engineers on operational and secure-development practices Contribute to architecture views with a reliability, operability, and security perspective Help document runbooks, playbooks, threat-model notes, and system design decisions Other duties as assigned Note: Job duties may change at any time with or without notice. Required Qualifications 5 + years in DevOps, platform, or infrastructure engineering, including ownership of customer-facing systems Deep experience with at least one major cloud provider and IaC practices in a team setting Strong proficiency in a scripting/programming language (Python, Go, Bash) Hands-on experience with container orchestration and CI/CD systems Working knowledge of cloud IAM and network security fundamentals Practical SRE experience Experience with Linux internals, networking, and debugging distributed systems under pressure Strong communication, organizational, and problem-solving skills Expected Travel is less than 10% Preferred Qualifications Bachelor’s degree in Computer Science, Software Engineering, Information Technology, Computer Engineering, or a related technical discipline (or equivalent practical experience). Experience in a startup or high-growth environment, preferably in a regulated environment Experience supporting audit cycles Threat modeling or offensive-security exposure (CTFs, pentest collaboration, bug bounty triage) Database operations experience Experience with service mesh, progressive delivery, and chaos engineering \n Why join Eko Health? Benefits and Perks We Offer: The opportunity to work on products that impact the health of millions of people. Generous paid-time off Stock incentive plans Medical/Dental/Vision, Disability + Life Insurance One Medical membership Parental Leave 401k Matching Learning and Development stipend We believe the ability to listen is the ability to care. Eko was named one of the World’s Top HealthTech Companies of 2025 by TIME and Statista. This honor reflects the mission to transform cardiac and pulmonary care through AI-powered stethoscopes and digital health solutions. Case Studies & Customer Stories Eko Blog Newsroom Work Experience & Location Requirements This role is a remote position with expected travel. See above for more details on travel expectations. Prolonged periods of sitting and working at a computer Must be able to perform job duties with or without reasonable accommodation #LI-Remote \n $119,000 - $167,426 a year Compensation for this role is determined using a tiered market-based compensation structure. Salary ranges are established based on geographic labor market data and may vary depending on the employee’s work location, experience, skills, and qualifications. Tier 1 $149,802 to $167,426 Tier 2 $134,822 to $150,683 Tier 3 $119,841 to $133,940 \n Eko is proud to be an equal opportunity employer and welcome people of different backgrounds, experiences, abilities and perspectives. We are committed to building a diverse and inclusive team. Employment offers will always be made by an Eko Health hiring manager or Talent Acquisition Partner with an @ekohealth.com email address only. We will never text you about employment offers. If you are receiving an employment inquiry or employment offer from a non 'ekohealth.com' email address, please assume it is spam. The Eko Health careers page lists only current and open positions. If you are contacted about a job not listed on the careers page, assume it is spam. If you believe you are a victim of a false employment scam, you should report these incidents to the FBI IC3. #LI-AC1

Lead corporate IT operations and cybersecurity program ensuring compliance and managing security risks. | 10+ years IT/cybersecurity experience, bachelor's degree, SOC 2 audit and security tooling experience preferred. | About Eko Health Eko builds AI and digital tools to enable every healthcare provider to more accurately detect heart and lung disease – the leading causes of death globally. Our FDA cleared, industry leading products are used by hundreds of thousands of clinicians on millions of patients around the world. With Eko, clinicians can detect cardiac and pulmonary disease with higher accuracy, diagnose with more confidence, manage treatment effectively, and ultimately give their patients the best care possible. We have strong venture capital backing from investors like Artis Ventures, Questa Capital, Highland Capital, and Mayo Clinic Ventures. Recognized by TIME magazine in 2025 as one of the world’s top healthcare technology companies, Eko is one of the fastest growing digital health companies with products used around the world at some of the most prestigious health systems. We have more than 8 FDA clearances including novel AI algorithms, and we invest heavily in quality clinical research and R&D to build and validate exceptional products for patients we care deeply about. We’ve built a mission driven, high performing, talented, and diverse team of engineers, physicians, PhD’s, creatives, and technologists. We are committed to investing in each other and our mission to ensure all patients have access to high quality care. We are headquartered in Emeryville, California and privately-held with world class investors and partners. Role Summary Eko is hiring a Head of Information Technology & Cybersecurity to own the company's corporate IT operations and cybersecurity program end to end. In this role, you will be the single accountable owner for keeping Eko's internal systems reliable and secure, and for corporate compliance obligations including SOC 2 and related frameworks. This is a corporate-facing role. The security of Eko's product — its FDA-cleared device software and AI platform — is owned by our Product Security team. This role does not set product security strategy; you will serve as a resource to Product Security, executing security testing against that team's pre-defined product security procedures as required. This is a hands-on and highly visible leadership role for someone who can build a program, run it day to day, and represent it credibly to auditors, customers, and executive leadership. Essential Functions: Corporate IT Operations & Infrastructure Own Eko's corporate IT strategy, infrastructure, and day-to-day operations: employee endpoints (MDM), identity and access management (SSO/MFA), corporate network, cloud workplace tools, helpdesk/support, and asset management. Manage software and SaaS procurement, licensing, and lifecycle, including vendor selection and renewal negotiations in partnership with Finance. Own the IT budget and technology roadmap, and build or manage the team (internal hires and/or outsourced providers) responsible for day-to-day IT support. Cybersecurity Program & Governance Design, implement, and continuously mature Eko's corporate cybersecurity program: security policies, endpoint and email security, data loss prevention, identity governance, security awareness training, and incident response planning. Own and maintain the corporate security risk register, and drive remediation of identified gaps with clear ownership and timelines. Act as Eko's primary point of contact for corporate-level security incidents — coordinating investigation, containment, communication, and post-incident review. Compliance & Audit Management Own SOC 2 (Type I/II) end to end: scoping, control design and implementation, evidence collection, and management of the external audit relationship. Own or contribute to other applicable corporate compliance obligations as the company's needs require — for example HIPAA/HITECH administrative and technical safeguards, HITRUST, and relevant privacy regulations (e.g., CCPA, UK/EU GDPR) tied to Eko's customer base and international footprint. Serve as the primary liaison for customer and partner security questionnaires, vendor security due-diligence requests, and audit committee or board reporting on IT/security posture. Maintain the compliance calendar so renewals, audits, and control testing happen on schedule, with no last-minute scrambles. Customer & Health-System Documentation Own the timely delivery of all corporate compliance and security documentation requested by health systems, clinicians, and other customers during sales procurement, vendor risk review, and ongoing account management — including SOC 2 reports, HIPAA/BAA materials, security questionnaires (e.g., SIG, CAIQ), penetration test summaries, and policy attestations. Maintain a current, ready-to-share documentation package so Sales and Customer Success can respond to procurement and security-review requests without delay. Partner with Sales, Customer Success, and Legal to support customer security calls and due-diligence sessions when a technical point of contact is needed. Cross-Functional Collaboration Partner with People/HR on secure onboarding and offboarding, device provisioning, and access provisioning/deprovisioning. Partner with Legal on vendor security reviews and data processing agreements. Partner with Product Security as a testing resource, executing tests against procedures that team defines — see note above on where this role's scope ends. Note: Job duties may change at any time with or without notice. Required Qualifications: Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent practical experience. 10+ years of experience in IT and/or cybersecurity roles, including leadership experience, ideally at a growth-stage company. Experience in a regulated healthcare, digital health, or medical device company, with familiarity with HIPAA/HITECH, HITRUST, or FDA cybersecurity expectations for connected devices. Hands-on experience owning SOC 2 from scoping through audit, including evidence collection and direct management of the external auditor relationship. Strong working knowledge of identity and access management, endpoint management, cloud workplace platforms (e.g., Google Workspace or Microsoft 365), and modern security tooling (EDR, MDM, SSO/IdP, DLP). Track record of building or maturing a security program — policies, a risk register, incident response, and security awareness training — largely from the ground up. Excellent written, verbal, and executive presentation skills, with the ability to translate technical risk for executive and non-technical audiences. Preferred Qualifications: Relevant certification such as CISSP, CISM, or CRISC. Experience supporting compliance needs tied to international expansion (e.g., UK/EU GDPR). \n Why join Eko Health? Benefits and Perks We Offer: The opportunity to work on products that impact the health of millions of people. Generous paid-time off Stock incentive plans Medical/Dental/Vision, Disability + Life Insurance One Medical membership Parental Leave 401k Matching Learning and Development stipend We believe the ability to listen is the ability to care. Eko was named one of the World’s Top HealthTech Companies of 2025 by TIME and Statista. This honor reflects the mission to transform cardiac and pulmonary care through AI-powered stethoscopes and digital health solutions. Case Studies & Customer Stories Eko Blog Newsroom Work Experience & Location Requirements This role is based out of our office in Emeryville, CA This is a Hybrid role (In-Office days are Tuesday, Wednesday and Thursday) Prolonged periods of sitting and working at a computer Must be able to perform job duties with or without reasonable accommodation \n $229,500 - $256,000 a year \n Eko is proud to be an equal opportunity employer and welcome people of different backgrounds, experiences, abilities and perspectives. We are committed to building a diverse and inclusive team. Employment offers will always be made by an Eko Health hiring manager or Talent Acquisition Partner with an @ekohealth.com email address only. We will never text you about employment offers. If you are receiving an employment inquiry or employment offer from a non 'ekohealth.com' email address, please assume it is spam. The Eko Health careers page lists only current and open positions. If you are contacted about a job not listed on the careers page, assume it is spam. If you believe you are a victim of a false employment scam, you should report these incidents to the FBI IC3.