Hi Folks, we are currently Hiring for Security Engineer.
Hiring: Security Engineer
Company : Pentabay Softwares
Location : Anna salai, Mount Road
Mode: Fulltime
Mission
As we scale our footprint in the Healthcare IT sector, you will play a critical role in safeguarding sensitive data (ePHI) and ensuring our cloud-native architectures are resilient against evolving threats. You will be the architect of our defense, bridging the gap between high-speed development and rigorous security standards. Your day-to-day will involve "shifting security left" by embedding DevSecOps practices into our CI/CD pipelines and leading our compliance efforts for SOC 2, ISO 27001, and HIPAA.
Key Responsibilities
- Defense & Architecture: Design and maintain secure cloud (AWS/Azure/GCP) and on-prem environments. Implement IAM policies, Zero Trust frameworks, and robust secrets management.
- Offensive Testing: Conduct regular vulnerability assessments (VAPT), penetration testing, and code reviews using tools like Burp Suite and Nessus.
- DevSecOps & Automation: Integrate SAST/DAST/SCA scanning into engineering workflows. Automate security tasks using Python or Bash.
- Incident Response: Monitor SIEM tools (Splunk/CrowdStrike), respond to threats, and develop risk mitigation strategies.
- Healthcare Compliance (Plus): Ensure data integrity for HL7/FHIR APIs and maintain HIPAA/HITECH audit readiness for healthcare clients.
- Auditing space like ISO27001 , ISO9001 preferred.
What You Bring
- Experience: 2–7 years in Information/Application Security with a strong grasp of the OWASP Top 10 and threat modeling (STRIDE).
- Technical Depth: Proficiency in network/endpoint security, PKI, encryption standards (TLS/SSL), and container security (Docker/Kubernetes).
- Compliance Knowledge: Familiarity with NIST, GDPR, and SOC 2 frameworks.
- Tools: Hands‑on experience with Metasploit, Wireshark, and Infrastructure-as-Code (Terraform).
- Bonus Points: Industry certifications like OSCP, CISSP, or CEH, and experience in Healthcare IT workflows.
Why Pentabay?
- We offer a security‑first engineering culture.
- Growth: A dedicated learning budget for certifications and conferences.
- Impact: Work on cutting‑edge Healthcare projects that demand the highest levels of data privacy.
Skills
- ISO9001, ISO27001
- Security Information and Event Management (SIEM)
- Cyber Security
- Amazon Web Services (AWS)
- Windows Azure, Microsoft Windows Azure
- HIPAA, Health care administration
Send resumes to: sandhiya.m at pentabay.com