Security Engineer

This role is with one of our client, an AI-Powered Revenue Cycle Intelligence Platform, transforming the healthcare billing stack with autonomous medical coding, proactive denial prevention, and workflow automation solutions.

Location: Bengaluru

Experience: 3 - 7 years

Role:Security Engineer

Job Overview

We're looking for a Security Engineer to safeguard our healthcare platform by designing, implementing, and maintaining robust security systems. You will play a critical role in protecting sensitive healthcare data, ensuring compliance, and strengthening our infrastructure against evolving threats in a fast-paced, AI-driven environment.

Key Responsibilities

• Design and implement security architecture across backend systems, cloud infrastructure, and applications.
• Assess security risks in AI/ML systems, including LLM applications, agents, RAG pipelines, model APIs, and AI-enabled workflows.
• Identify vulnerabilities and proactively mitigate risks through regular security assessments and penetration testing.
• Develop security controls for AI applications, including input validation, output filtering, guardrails, rate limiting, monitoring, and red-team testing.
• Develop and enforce security best practices, policies, and standards across engineering teams
• Monitor systems for security breaches, investigate incidents, and implement corrective actions
• Secure APIs, microservices, and distributed systems to prevent unauthorized access and data leaks
• Collaborate with engineering teams to integrate security into the development lifecycle (DevSecOps)
• Perform secure code reviews, vulnerability assessments, and threat modeling for web applications, APIs, backend services, and cloud-native systems.
• Ensure compliance with healthcare regulations and standards such as HIPAA
• Help define secure coding standards, security design patterns, and engineering best practices.

What We're Looking For

• Bachelor's or Master's degree in Computer Science, Cybersecurity, or related field
• 3+ years of experience in security and compliance frameworks
• Strong understanding of network security, application security, and cloud security
• Experience with cloud platforms such as AWS, Azure, or GCP
• Knowledge of security tools such as SIEM, IDS/IPS, vulnerability scanners, firewalls.
• Familiarity with secure coding practices and common vulnerabilities (OWASP Top 10)
• Experience with container security (Docker, Kubernetes), DevSecOps practices and automation tools
• Certifications such as CEH, CISSP, or Security+ are a plus
• Strong problem-solving and incident response skills