Security and Compliance Engineer_Offshore
IndiaFull-time4–6 yrsPosted open since jun 2025
Mid-level legal role at Fa Ertb Saasfaprod1. Needs 4–6 years.
About the role
We're seeking a hands-on and detail-oriented Security and Compliance Engineer to drive security across our applications, infrastructure, and compliance programs-especially in a healthcare environment. This role combines security engineering, DevSecOps, and risk management with a strong focus on application, cloud, AI, and data security.
What you'll do
- Conduct web and mobile application penetration testing, vulnerability scanning, and remediation support across our platforms
- Integrate DevSecOps practices into CI/CD pipelines, using tools like Snyk, Terraform, and container security scanners
- Implement and monitor Cloud Security Posture Management (CSPM) tools such as Wiz to secure cloud configurations and infrastructure
- Partner with DevOps to enforce secure provisioning via Infrastructure as Code (IaC)
- Lead and support compliance initiatives (HIPAA, SOC 2, HITRUST) using platforms like Drata (Compliance-as-a-Service)
What you need
- Compliance
- Terraform
- DLP
- Cloud security
- Documentation
- Penetration testing
Good to have
- Azure
- Python
- Bash
- CEH
- CISSP
- EDR