Security and Compliance Engineer Offshore

About the role

We're seeking a hands-on and detail-oriented Security and Compliance Engineer to drive security across our applications, infrastructure, and compliance programs-especially in a healthcare environment. This role combines security engineering, DevSecOps, and risk management with a strong focus on application, cloud, AI, and data security.

What you'll do

• Conduct web and mobile application penetration testing, vulnerability scanning, and remediation support across our platforms
• Integrate DevSecOps practices into CI/CD pipelines, using tools like Snyk, Terraform, and container security scanners
• Implement and monitor Cloud Security Posture Management (CSPM) tools such as Wiz to secure cloud configurations and infrastructure
• Partner with DevOps to enforce secure provisioning via Infrastructure as Code (IaC)
• Lead and support compliance initiatives (HIPAA, SOC 2, HITRUST) using platforms like Drata (Compliance-as-a-Service)

What you need

• 4–6 yrs of experience
• Compliance
• Terraform
• DLP
• Cloud security
• Documentation
• Penetration testing
• Any graduate

Good to have

• Azure
• Python
• Bash
• CEH
• CISSP
• EDR