Security and Compliance Engineer responsible for application, cloud, AI, data, and infrastructure security in a healthcare environment. Duties include penetration testing, vulnerability remediation, DevSecOps integration, cloud security posture management, compliance initiatives for HIPAA, SOC 2, and HITRUST, threat modeling, secure code and architecture reviews, email and bot protection, AI security, incident response, data protection, audit support, and security documentation.
About the Role
We're seeking a hands-on and detail-oriented Security and Compliance Engineer to drive security across our applications, infrastructure, and compliance programs-especially in a healthcare environment. This role combines security engineering, DevSecOps, and risk management with a strong focus on application, cloud, AI, and data security.
You will work closely with engineering, DevOps, and compliance teams to embed security into the development lifecycle, support regulatory frameworks, and ensure cloud-native environments and AI technologies are secure by design.
Responsibilities
- Conduct web and mobile application penetration testing, vulnerability scanning, and remediation support across our platforms.
- Integrate DevSecOps practices into CI/CD pipelines, using tools like Snyk, Terraform, and container security scanners.
- Implement and monitor Cloud Security Posture Management (CSPM) tools such as Wiz to secure cloud configurations and infrastructure.
- Partner with DevOps to enforce secure provisioning via Infrastructure as Code (IaC).
- Lead and support compliance initiatives (HIPAA, SOC 2, HITRUST) using platforms like Drata (Compliance-as-a-Service).
- Design and enhance email gateway security (e.g., Barracuda) and bot protection (e.g., WatchGuard) to defend against phishing and automated threats.
- Evaluate and secure chatbots and AI systems, addressing risks like prompt injection, data leakage, and model integrity.
- Drive data security best practices including encryption, data loss prevention (DLP), and classification strategies.
- Collaborate with engineering to embed security controls in product design and conduct threat modeling, secure code reviews, and architecture reviews.
- Participate in incident detection, response, and root cause analysis, while ensuring effective logging and monitoring are in place.
- Maintain security documentation and support audits and third-party assessments.
Required Skills & Qualifications
- 4-6 years of experience in security engineering, compliance, and DevSecOps.
- Proficiency in web and mobile application security, including OWASP Top 10, SAST/DAST tools, and manual testing with Burp Suite, etc.
- Strong exposure to DevSecOps workflows, with hands-on experience using tools like Snyk, Terraform, and container security.
- Deep understanding of HIPAA, SOC 2, and healthcare compliance requirements.
- Experience with cloud security, preferably on Microsoft Azure, and familiarity with CSPM tools like Wiz.
- Working knowledge of Drata or similar compliance automation platforms.
- Exposure to email security gateways, bot protection, and threat detection tools.
- Familiarity with AI and chatbot security concepts and current risks in the generative AI space.
- Strong grasp of data security principles-encryption, access controls, data classification, and DLP.
- Scripting or automation skills in Python, Bash, or equivalent are a plus.
- Strong written and verbal communication, documentation, and collaboration skills.
Nice to Have
- Certifications like OSCP, CEH, CCSK, CISSP, HCISPP, or similar.
- Familiarity with tools like KnowBe4, Intune, or Azure AD for identity and endpoint security.
- Understanding of Zero Trust Architecture, RBAC, and endpoint detection and response (EDR) strategies.
- Previous experience in a health tech, SaaS, or AI-focused organization.
Why Join Us
- Make a real impact in securing healthcare and AI systems at scale.
- Collaborate in a high-ownership environment with modern tools and cloud-native practices.
- Work in a security-forward company that values both innovation and compliance.
- Flexible work environment and growth opportunities in a fast-paced tech culture.
Similar Jobs
Artificial Intelligence • Fintech • Information Technology • Logistics • Payments • Business Intelligence • Generative AI
Supports cloud, application, infrastructure, container, and Kubernetes security engineering. Contributes to multi-cloud controls, IAM policies, policy-as-code guardrails, vulnerability triage, compliance evidence gathering, security automation, and secure AI system monitoring. The role also involves scripting, documentation, root-cause analysis, and collaboration with Engineering, IT, Compliance, and senior security engineers.
Top Skills:
AWSAzureBashCi/CdContainer SecurityFedrampGCPIamInfrastructure As CodeIso 27001JavaScriptKubernetesNetwork AclsOrganizations/ScpsPci-DssPolicy As CodePythonSecurity GroupsSoc 2VpcVulnerability Scanning
Artificial Intelligence • Fintech • Information Technology • Logistics • Payments • Business Intelligence • Generative AI
Lead security engineering efforts across multi-cloud environments by designing cloud security controls, policy-as-code guardrails, container protections, and automated remediation. Own vulnerability management and incident escalation, conduct forensics and root-cause analysis, translate compliance requirements into technical controls, and automate evidence collection. Mentor engineers, oversee threat modeling and architecture reviews, maintain security documentation, and participate in on-call operations.
Top Skills:
AWSAws ConfigAws OrganizationsAzureCi/CdDastEdrGCPGitGoGuarddutyIamKmsKubernetesPolicy-As-CodePythonQualysSastScaSecurity HubService Control PoliciesSIEMSoarTenableTerraformVpcWiz
Artificial Intelligence • Fintech • Information Technology • Logistics • Payments • Business Intelligence • Generative AI
Designs and implements multi-cloud security controls, policy-as-code guardrails, IAM and network protections, container and Kubernetes security, vulnerability remediation, and incident response tooling. Partners with engineering, IT, compliance, and risk teams on audits and control validation. The role also mentors security engineers, supports root-cause analysis, improves response runbooks, and participates in on-call rotations.
Top Skills:
AWSAzureBashCi/CdContainer SecurityEdrGCPIamInfrastructure As CodeJavaScriptKubernetesNaclsOrganizations/ScpsPythonVpcVulnerability Scanning
What you need to know about the Delhi Tech Scene
Delhi, India's capital city, is a place where tradition and progress co-exist. While Old Delhi is known for its rich history and bustling markets, New Delhi is defined by its modern architecture. It's clear the region places a strong emphasis on preserving its cultural heritage while embracing technological advancements, particularly in artificial intelligence, which plays a central role in shaping the city's tech landscape, fueled by investments in research and development.
