Security Engineer

About the Role

We at Innovaccer are looking for a Security Engineer-II who will be responsible to perform real time monitoring, analysis of the security events and administration of Security tools. This role will encompass the use of a broad range of security domains (Endpoint Security, Data Security, Cloud Security, Vulnerability Assessment, Automation, Monitoring). This role would be a great opportunity to learn and grow as you would be exposed to multiple security domains on Gov Sector environments of Innovaccer.

A Day in the Life

• Work hands-on with Security, Infrastructure, DevOps, and Engineering teams to secure cloud and infrastructure environments.
• Perform IAM and access-control reviews across AWS, Azure, and GCP, including role, permission, service account, and privileged access audits
• Conduct security configuration and posture assessments across commercial AWS, Azure, and GCP environments, with exposure to AWS GovCloud and Azure Government environments.
• Perform vulnerability assessments, validate findings, track remediation, and conduct remediation verification using tools such as Tenable/Nessus, OpenVAS, Nmap, and similar technologies
• Triage, investigate, contain, and respond to security incidents and events across cloud, endpoint, network, and infrastructure environments.
• Perform incident investigation and root-cause analysis, coordinate remediation, document findings, and support post-incident improvements.
• Monitor and investigate security events using SIEM, EDR/XDR, DLP, network security, and other security monitoring technologies.
• Support administration, tuning, and troubleshooting of security technologies including SIEM, EDR/XDR, DLP, firewalls, IDS/IPS, and vulnerability management solutions.
• Integrate and monitor security logs from Linux and Windows systems, firewalls, IDS/IPS, VPNs, webservers, Kubernetes, and cloud-native services.
• Perform cloud security reviews covering IAM, network security, logging, monitoring, encryption, security groups, storage, and managed cloud services.
• Support DLP controls and investigations involving sensitive, confidential, and regulated data across endpoints, cloud services, email, and other data channels.
• Support Kubernetes and container security, including security configuration, RBAC, network policies, image security, and workload monitoring.
• Work with Engineering and DevOps teams to investigate and remediate cloud, infrastructure, and security vulnerabilities.
• Support security assessments and audit activities for regulated and government environments. Develop automation scripts to improve security assessments, incident response, monitoring, reporting, and operational processes.
• Participate in an on-call rotation and provide security support during off-hours and security incidents as required

What You Need

• 3-5 years of hands-on experience as an Infrastructure Security, Cloud Security, or Security Engineer. Hands-on experience with AWS, Azure, and GCP, with strong preference for experience securing commercial and government cloud environments such as AWS GovCloud and Azure Government. Strong understanding of IAM, cloud security controls, network security, vulnerability management, and security monitoring
• Hands-on experience with security incident investigation, incident response, reporting, and remediation
• Familiarity with Kubernetes, Docker, and cloud-native services, particularly within GCP, is preferred. Proficiency with open-source security tools and technologies.
• Scripting or automation experience using Python, Bash, PowerShell, or similar languages is a plus. Security certifications such as Security+, CEH, OSCP, or relevant cloud security certifications are desirable.
• Ability to work independently, collaborate effectively with cross-functional teams, and operate effectively under pressure.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to manage multiple priorities and work in a 24x7 security operations environment, including on-call support as required.
• Curious, self-motivated, and willing to take ownership of new security challenges and responsibilities.