Lead Security Engineer | AWS, Cloud & Application Security

Dear Candidate,

About Company:

Edvak is a US-based SaaS company transforming the healthcare sector with our innovative AI solutions. We are dedicated to excellence, creativity, and innovation, delivering exceptional services to our clients. Our operations in India are based in the vibrant city of Hyderabad.

As we continue to expand, we are looking for a dynamic Content Strategist/Marketer to lead our content marketing efforts and drive Edvak's success in a competitive market.

Website: www.edvak.com

About the Role :

Edvak is looking for a hands on Lead Security Engineer to own security across our platform and internal technology environment.

This is not a compliance-only or policy-focused role. We need someone who can personally investigate security risks, configure security controls, work with developers on fixes, and continuously improve our security posture.

You will work across AWS, applications, APIs, databases, CI/CD, employee devices, and access controls.

What You’ll Be Responsible For :

• Secure and continuously review our AWS environment, including IAM, networking, storage, databases, logging, encryption, and access controls.
• Review application architecture, APIs, authentication, authorization, and source code for security issues.
• Work directly with developers to fix vulnerabilities and improve secure coding practices.
• Implement and maintain security checks in CI/CD, including code scanning, dependency scanning, and secret detection.
• Manage vulnerability findings across cloud, applications, servers, databases, and endpoints, and drive them through remediation.
• Review database security, production access, privileged accounts, and sensitive data handling.
• Maintain endpoint security standards for company laptops, including patching, encryption, EDR, and access controls.
• Monitor security events, investigate suspicious activity, and lead the technical response to security incidents.
• Coordinate penetration tests and ensure findings are properly remediated.
• Support technical controls required for HIPAA, SOC 2, and customer security reviews.

What We’re Looking For:

• 7+ years of hands-on security engineering experience.
• Strong AWS security experience.
• Strong application and API security knowledge.
• Good understanding of IAM, authentication, authorization, networking, databases, and encryption.
• Experience with vulnerability management and security monitoring.
• Experience securing CI/CD pipelines and software development environments.
• Able to review code and work directly with engineering teams on remediation.
• Comfortable investigating problems instead of only generating reports.
• Strong understanding of common web and API vulnerabilities, including access-control issues, injection, authentication flaws, and sensitive-data exposure.

Nice to Have

• Experience with healthcare or other regulated SaaS platforms.
• HIPAA or SOC 2 experience.
• .NET/C# application security experience.
• Experience with AWS Security Hub, Guard Duty, CloudTrail, Inspector, WAF, or similar tools.
• Security certifications are helpful, but practical experience matters more.

The Person We Want

• You should be comfortable moving between cloud infrastructure, applications, APIs, code, databases, and employee systems.
• We are looking for someone who can identify a security problem, understand the risk, work with the right team to fix it, and verify that it is actually resolved.
• This is a hands on ownership role, not a position where security findings are simply passed to someone else.