4666-Security Engineer II

Engineering at Innovaccer With every line of code, we accelerate our customers' success, turning complex challenges into innovative solutions. Collaboratively, we transform each data point we gather into valuable insights for our customers. Join us and be part of a team that's turning dreams of better healthcare into reality, one line of code at a time. Together, we're shaping the future and making a meaningful impact on the world. About The Role We at Innovaccer are looking for a Security Engineer-II who will be responsible to perform real time monitoring, analysis of the security events and administration of Security tools. This role will encompass the use of a broad range of security domains (Endpoint Security, Data Security, Cloud Security, Vulnerability Assessment, Automation, Monitoring). This role would be a great opportunity to learn and grow as you would be exposed to multiple security domains on Gov Sector environments of Innovaccer. A Day in the Life Work hands-on with Security, Infrastructure, DevOps, and Engineering teams to secure cloud and infrastructure environmentsPerform IAM and access-control reviews across AWS, Azure, and GCP, including role, permission, service account, and privileged access auditsConduct security configuration and posture assessments across commercial AWS, Azure, and GCP environments, with exposure to AWS GovCloud and Azure Government environmentsPerform vulnerability assessments, validate findings, track remediation, and conduct remediation verification using tools such as Tenable/Nessus, OpenVAS, Nmap, and similar technologiesTriage, investigate, contain, and respond to security incidents and events across cloud, endpoint, network, and infrastructure environmentsPerform incident investigation and root-cause analysis, coordinate remediation, document findings, and support post-incident improvementsMonitor and investigate security events using SIEM, EDR/XDR, DLP, network security, and other security monitoring technologiesSupport administration, tuning, and troubleshooting of security technologies including SIEM, EDR/XDR, DLP, firewalls, IDS/IPS, and vulnerability management solutionsIntegrate and monitor security logs from Linux and Windows systems, firewalls, IDS/IPS, VPNs, webservers, Kubernetes, and cloud-native servicesPerform cloud security reviews covering IAM, network security, logging, monitoring, encryption, security groups, storage, and managed cloud servicesSupport DLP controls and investigations involving sensitive, confidential, and regulated data across endpoints, cloud services, email, and other data channelsSupport Kubernetes and container security, including security configuration, RBAC, network policies, image security, and workload monitoringWork with Engineering and DevOps teams to investigate and remediate cloud, infrastructure, and security vulnerabilitiesSupport security assessments and audit activities for regulated and government environmentsDevelop automation scripts to improve security assessments, incident response, monitoring, reporting, and operational processesParticipate in an on-call rotation and provide security support during off-hours and security incidents as required What You Need Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field preferred3-5 years of hands-on experience as an Infrastructure Security, Cloud Security, or Security EngineerHands-on experience with AWS, Azure, and GCP, with strong preference for experience securing commercial and government cloud environments such as AWS GovCloud and Azure GovernmentStrong understanding of IAM, cloud security controls, network security, vulnerability management, and security monitoringHands-on experience with security incident investigation, incident response, reporting, and remediationFamiliarity with Kubernetes, Docker, and cloud-native services, particularly within GCP, is preferredProficiency with open-source security tools and technologiesScripting or automation experience using Python, Bash, PowerShell, or similar languages is a plusSecurity certifications such as Security+, CEH, OSCP, or relevant cloud security certifications are desirableAbility to work independently, collaborate effectively with cross-functional teams, and operate effectively under pressureStrong analytical, troubleshooting, documentation, and communication skillsAbility to manage multiple priorities and work in a 24x7 security operations environment, including on-call support as requiredCurious, self-motivated, and willing to take ownership of new security challenges and responsibilities We offer competitive benefits to set you up for success in and outside of work. Here's What We Offer Generous PTO Benefits: Enjoy PTO benefit accrual of 20 days per yearParental Leave: Experience one of the industry's best parental leave policies to spend time with your new additionRewards & Recognition: Unlock your potential and be rewarded generously with both monetary incentives and widespread recognition for your dedication and outstanding performance. Insurance Benefits: We offer medical, dental, and vision benefits along with 100% company-sponsored short and long-term disability and basic life insurance. Legal aid and pet insurance options are available at a discounted rate Innovaccer is an equal-opportunity employer. We celebrate diversity, and we are committed to fostering an inclusive and diverse workplace where all employees, regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, marital status, or veteran status, feel valued and empowered. Disclaimer: Innovaccer does not charge fees or require payment from individuals or agencies for securing employment with us. We do not guarantee job spots or engage in any financial transactions related to employment. If you encounter any posts or requests asking for payment or personal information, we strongly advise you to report them immediately to our HR department at px@innovaccer.com. Additionally, please exercise caution and verify the authenticity of any requests before disclosing personal and confidential information, including bank account details.