4666-Security Engineer II

Innovaccer develops technology that uses data and software to improve healthcare outcomes. The Security Engineer II will monitor and analyze security events, administer security tools, and secure cloud and infrastructure environments across multiple security domains. The role also involves vulnerability management, incident response, security assessments, automation, and support for regulated and government environments.

Responsibilities:

• Work hands-on with Security, Infrastructure, DevOps, and Engineering teams to secure cloud and infrastructure environments
• Perform IAM and access-control reviews across AWS, Azure, and GCP, including role, permission, service account, and privileged access audits
• Conduct security configuration and posture assessments across commercial AWS, Azure, and GCP environments, with exposure to AWS GovCloud and Azure Government environments
• Perform vulnerability assessments, validate findings, track remediation, and conduct remediation verification using tools such as Tenable/Nessus, OpenVAS, Nmap, and similar technologies
• Triage, investigate, contain, and respond to security incidents and events across cloud, endpoint, network, and infrastructure environments
• Perform incident investigation and root-cause analysis, coordinate remediation, document findings, and support post-incident improvements
• Monitor and investigate security events using SIEM, EDR/XDR, DLP, network security, and other security monitoring technologies
• Support administration, tuning, and troubleshooting of security technologies including SIEM, EDR/XDR, DLP, firewalls, IDS/IPS, and vulnerability management solutions
• Integrate and monitor security logs from Linux and Windows systems, firewalls, IDS/IPS, VPNs, webservers, Kubernetes, and cloud-native services
• Perform cloud security reviews covering IAM, network security, logging, monitoring, encryption, security groups, storage, and managed cloud services
• Support DLP controls and investigations involving sensitive, confidential, and regulated data across endpoints, cloud services, email, and other data channels
• Support Kubernetes and container security, including security configuration, RBAC, network policies, image security, and workload monitoring
• Work with Engineering and DevOps teams to investigate and remediate cloud, infrastructure, and security vulnerabilities
• Support security assessments and audit activities for regulated and government environments
• Develop automation scripts to improve security assessments, incident response, monitoring, reporting, and operational processes
• Participate in an on-call rotation and provide security support during off-hours and security incidents as required

Requirements:

• 3-5 years of hands-on experience as an Infrastructure Security, Cloud Security, or Security Engineer
• Hands-on experience with AWS, Azure, and GCP
• Strong understanding of IAM, cloud security controls, network security, vulnerability management, and security monitoring
• Hands-on experience with security incident investigation, incident response, reporting, and remediation
• Proficiency with open-source security tools and technologies
• Ability to work independently, collaborate effectively with cross-functional teams, and operate effectively under pressure
• Strong analytical, troubleshooting, documentation, and communication skills
• Ability to manage multiple priorities
• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field
• strong preference for experience securing commercial and government cloud environments such as AWS GovCloud and Azure Government
• Familiarity with Kubernetes, Docker, and cloud-native services, particularly within GCP
• Scripting or automation experience using Python, Bash, PowerShell, or similar languages
• Security certifications such as Security+, CEH, OSCP, or relevant cloud security certifications
• Curious, self-motivated, and willing to take ownership of new security challenges and responsibilities