4666-安全工程师 II

Engineering at Innovaccer

With every line of code, we accelerate our customers' success, turning complex challenges into innovative solutions. Collaboratively, we transform each data point we gather into valuable insights for our customers. Join us and be part of a team that's turning dreams of better healthcare into reality, one line of code at a time. Together, we’re shaping the future and making a meaningful impact on the world.
About the Role
We at Innovaccer are looking for a Security Engineer-II who will be responsible to perform real time monitoring, analysis of the security events and administration of Security tools. This role will encompass the use of a broad range of security domains (Endpoint Security, Data Security, Cloud Security, Vulnerability Assessment, Automation, Monitoring). This role would be a great opportunity to learn and grow as you would be exposed to multiple security domains on Gov Sector environments of Innovaccer.
A Day in the Life

• Work hands-on with Security, Infrastructure, DevOps, and Engineering teams to secure cloud and infrastructure environments.

• Perform IAM and access-control reviews across AWS, Azure, and GCP, including role, permission, service account, and privileged access audits.

• Conduct security configuration and posture assessments across commercial AWS, Azure, and GCP environments, with exposure to AWS GovCloud and Azure Government environments.

• Perform vulnerability assessments, validate findings, track remediation, and conduct remediation verification using tools such as Tenable/Nessus, OpenVAS, Nmap, and similar technologies.

• Triage, investigate, contain, and respond to security incidents and events across cloud, endpoint, network, and infrastructure environments.

• Perform incident investigation and root-cause analysis, coordinate remediation, document findings, and support post-incident improvements.

• Monitor and investigate security events using SIEM, EDR/XDR, DLP, network security, and other security monitoring technologies.

• Support administration, tuning, and troubleshooting of security technologies including SIEM, EDR/XDR, DLP, firewalls, IDS/IPS, and vulnerability management solutions.

• Integrate and monitor security logs from Linux and Windows systems, firewalls, IDS/IPS, VPNs, webservers, Kubernetes, and cloud-native services.

• Perform cloud security reviews covering IAM, network security, logging, monitoring, encryption, security groups, storage, and managed cloud services.

• Support DLP controls and investigations involving sensitive, confidential, and regulated data across endpoints, cloud services, email, and other data channels.

• Support Kubernetes and container security, including security configuration, RBAC, network policies, image security, and workload monitoring.

• Work with Engineering and DevOps teams to investigate and remediate cloud, infrastructure, and security vulnerabilities.

• Support security assessments and audit activities for regulated and government environments.

• Develop automation scripts to improve security assessments, incident response, monitoring, reporting, and operational processes.

• Participate in an on-call rotation and provide security support during off-hours and security incidents as required.

What You Need

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field preferred.

• 3-5 years of hands-on experience as an Infrastructure Security, Cloud Security, or Security Engineer.

• Hands-on experience with AWS, Azure, and GCP, with strong preference for experience securing commercial and government cloud environments such as AWS GovCloud and Azure Government.

• Strong understanding of IAM, cloud security controls, network security, vulnerability management, and security monitoring.

• Hands-on experience with security incident investigation, incident response, reporting, and remediation.

• Familiarity with Kubernetes, Docker, and cloud-native services, particularly within GCP, is preferred.

• Proficiency with open-source security tools and technologies.

• Scripting or automation experience using Python, Bash, PowerShell, or similar languages is a plus.

• Security certifications such as Security+, CEH, OSCP, or relevant cloud security certifications are desirable.

• Ability to work independently, collaborate effectively with cross-functional teams, and operate effectively under pressure.

• Strong analytical, troubleshooting, documentation, and communication skills.

• Ability to manage multiple priorities and work in a 24x7 security operations environment, including on-call support as required.

• Curious, self-motivated, and willing to take ownership of new security challenges and responsibilities.

We offer competitive benefits to set you up for success in and outside of work.
Here’s What We Offer

• Generous PTO Benefits: Enjoy PTO benefit accrual of 20 days per year.

• Parental Leave: Experience one of the industry's best parental leave policies to spend time with your new addition.

• Rewards & Recognition: Unlock your potential and be rewarded generously with both monetary incentives and widespread recognition for your dedication and outstanding performance.

• Insurance Benefits: We offer medical, dental, and vision benefits along with 100% company-sponsored short and long-term disability and basic life insurance. Legal aid and pet insurance options are available at a discounted rate.

Innovaccer is an equal-opportunity employer. We celebrate diversity, and we are committed to fostering an inclusive and diverse workplace where all employees, regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, marital status, or veteran status, feel valued and empowered.
Disclaimer:
Innovaccer does not charge fees or require payment from individuals or agencies for securing employment with us. We do not guarantee job spots or engage in any financial transactions related to employment. If you encounter any posts or requests asking for payment or personal information, we strongly advise you to report them immediately to our HR department at . Additionally, please exercise caution and verify the authenticity of any requests before disclosing personal and confidential information, including bank account details.
Originally posted on Himalayas