Information Security Engineer

Smart Data Solutions Llc; Chennai District; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

5-day work week

Job summary

Smart Data Solutions, a leading provider of data management and workflow solutions for health plans, is seeking an Information Security Engineer. You will handle vulnerability management, security monitoring, and incident response across cloud and on‑prem environments.

You will coordinate with infrastructure teams, tune detections, and develop security documentation while participating in on‑call rotations. Join a growth‑oriented team committed to secure digital workflows.

Qualifications

• 3+ years of experience in information security, systems engineering, or a related technical role.

Responsibilities

• Analyze scan results and distinguish true risk from false positives, including vendor patches and compensating controls.

Skills

Windows OS

MySQL

PowerShell

Bash

Python

NIST

ISO 27001

HITRUST

InfoSec concepts

Tools

Rapid7 InsightVM

SIEM

Digital Risk Protection

Automox

Duo

ManageEngine

ExtremeIQ

Sophos

Palo Alto Firewalls

Qualys

Office 365

Job description

Smart Data Solutions, a leading provider of data management, claim routing and workflow solutions to health plans and TPAs, is looking for a Information Security Engineer to join our team!

What you’ll be doing?

Vulnerability Management and Security Configuration

• Analyze scan results to distinguish true risk from false positives, including understanding vendor backported patches and compensating controls
• Coordinate with infrastructure, application, and engineering teams to remediate vulnerabilities within defined SLAs
• Identify security vulnerabilities in the QuickClaim web application and other SDS web applications and collaborate with the Senior Product Developer to remediate identified issues.
• Monitor threat intelligence sources and emerging vulnerabilities to assess organizational impact.
• Implement and manage application control policies to prevent execution of unauthorized or malicious software
• Participate in monthly maintenance when applicable

Security Monitoring and Alerting

• Monitor security alerts and events from SIEM, EDR, endpoint protection, and cloud security platforms to identify potential security incidents.
• Tune monitoring and detection controls based on emerging threats, environmental changes, and lessons learned from incidents.
• Work with infrastructure and engineering teams to ensure proper log collection, ingestion, and retention for security monitoring purposes.
• Monitor and assess cloud environments for misconfigurations, insecure permissions, and policy violations.
• Respond to security incidents by investigating alerts, determining scope and impact, and coordinating containment, eradication, and recovery efforts.
• Follow established incident response procedures and escalation paths to ensure timely and appropriate response.
• Perform root cause analysis and document findings, actions taken, and remediation steps.
• Support post-incident reviews to identify gaps, lessons learned, and opportunities for improvement.
• Participate in an on‑call rotation with the Security Pager

Projects

• Lead and execute security improvement projects to remediate identified gaps, including planning, prioritization, implementation, and validation.
• Translate identified risks into actionable security projects aligned with business needs and organizational risk tolerance.
• Track project progress and outcomes, ensuring measurable risk reduction and documented improvements.

Documentation

• Create documentation for all security related configurations and procedures.
• If documentation for a procedure already exists, use it when performing procedures and update as necessary.

Perform other duties as assigned.

The duties set forth above are essential job functions for the role. Reasonable accommodations may be made to enable individuals with disabilities to perform essential job functions.

What we’re looking for?

• Microsoft Windows Operations Systems (Workstation and Server)
• MySQL database or similar
• Experience with Rapid7 InsightVM, SIEM, Digital Risk Protection, Automox, Duo, Manage Engine, ExtremeIQ, Sophos, Palo Alto Firewalls, Qualys and Office 365, or similar
• Experience with scripting or automation (PowerShell, Bash, Python) to support remediation, monitoring, or configuration validation.
• Experience and familiarity with security frameworks such as NIST, ISO, and HITRUST
• Experience and familiarity with information security concepts and best practices in all domains (e.g. Physical, Administrative, Technical, etc.)
• 3+ years of experience in information security, systems engineering, or a related technical role
• Strong personal organization and task discipline
• Proficient in information and statistical analysis
• Objectivity and fairness

Why this is the company for you?

• A company culture that is authentic and values teamwork, humility, and fairness! We work hard for our customers and have fun along the way!
• A professional development and growth-oriented workplace.
• Work-life balance with a 5-day work week.

Who is Smart Data Solutions?

Smart Data Solutions (SDS) is a technology leader in healthcare process automation and interoperability. As a strategic partner, SDS helps clients digitally transform their operations, delivering tangible value through reduced costs, streamlined workflows, and an improved customer experience. With data, AI, and automation at its core, SDS provides solutions in Digital Mailroom and Data Capture, Clearinghouse, Intelligent Medical Records, Prior Authorization and Claim Operations. Trusted by over 500 clients—including multiple Blue Cross Blue Shield plans, regional health plans, TPAs, providers, and healthcare partners—SDS streamlines complex front, middle, and back‑office operations.

Smart Data Solutions is an equal opportunity employer.

All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, age, marital status, pregnancy, genetic information, or other legally protected status.