Security Engineer

Innovaccer Inc.; United States; On-site; USD 110,000 - 160,000; Full time

Job summary

Innovaccer Inc. seeks a Security Engineer-II to monitor security events in real time, analyze findings, and administer security tools across cloud and on-prem environments.

You will perform IAM reviews, vulnerability assessments, and incident response in AWS, Azure, GCP, and Gov Cloud settings, collaborating with DevOps and Engineering teams. The role emphasizes automation, policy enforcement, and ongoing improvement of security postures while supporting 24x7 operations.

Qualifications

• Hands-on security experience across cloud platforms (AWS/Azure/GCP).
• Experience with IAM, access reviews, and cloud security controls.
• Familiarity with vulnerability management and security monitoring tools.

Responsibilities

• Monitor security events in real time and analyze incidents.
• Perform IAM and access-control reviews across cloud environments.
• Conduct posture assessments and coordinate remediation.
• Investigate, triage, and respond to security incidents across cloud, endpoint, and network.
• Support security tool administration (SIEM, EDR/XDR, DLP, firewalls).

Skills

Python scripting

Bash scripting

PowerShell scripting

Independent work

Cross-functional collaboration

Education

Security certifications (Security+, CEH, OSCP)

Tools

AWS

Azure

GCP

Kubernetes

Docker

Nessus

OpenVAS

Job description

We at Innovaccer are looking for a Security Engineer-II who will be responsible to perform real time monitoring, analysis of the security events and administration of Security tools. This role will encompass the use of a broad range of security domains (Endpoint Security, Data Security, Cloud Security, Vulnerability Assessment, Automation, Monitoring). This role would be a great opportunity to learn and grow as you would be exposed to multiple security domains on Gov Sector environments of Innovaccer.

A Day in the Life

• Work hands-on with Security, Infrastructure, DevOps, and Engineering teams to secure cloud and infrastructure environments.
• Perform IAM and access-control reviews across AWS, Azure, and GCP, including role, permission, service account, and privileged access audits
• Conduct security configuration and posture assessments across commercial AWS, Azure, and GCP environments, with exposure to AWS GovCloud and Azure Government environments.
• Perform vulnerability assessments, validate findings, track remediation, and conduct remediation verification using tools such as Tenable/Nessus, OpenVAS, Nmap, and similar technologies
• Triage, investigate, contain, and respond to security incidents and events across cloud, endpoint, network, and infrastructure environments.
• Perform incident investigation and root-cause analysis, coordinate remediation, document findings, and support post-incident improvements.
• Monitor and investigate security events using SIEM, EDR/XDR, DLP, network security, and other security monitoring technologies.
• Support administration, tuning, and troubleshooting of security technologies including SIEM, EDR/XDR, DLP, firewalls, IDS/IPS, and vulnerability management solutions.
• Integrate and monitor security logs from Linux and Windows systems, firewalls, IDS/IPS, VPNs, webservers, Kubernetes, and cloud-native services.
• Perform cloud security reviews covering IAM, network security, logging, monitoring, encryption, security groups, storage, and managed cloud services.
• Support DLP controls and investigations involving sensitive, confidential, and regulated data across endpoints, cloud services, email, and other data channels.
• Support Kubernetes and container security, including security configuration, RBAC, network policies, image security, and workload monitoring.
• Work with Engineering and DevOps teams to investigate and remediate cloud, infrastructure, and security vulnerabilities.
• Support security assessments and audit activities for regulated and government environments. Develop automation scripts to improve security assessments, incident response, monitoring, reporting, and operational processes.
• Participate in an on-call rotation and provide security support during off-hours and security incidents as required

What You Need

• 3-5 years of hands-on experience as an Infrastructure Security, Cloud Security, or Security Engineer. Hands-on experience with AWS, Azure, and GCP, with strong preference for experience securing commercial and government cloud environments such as AWS GovCloud and Azure Government. Strong understanding of IAM, cloud security controls, network security, vulnerability management, and security monitoring
• Hands-on experience with security incident investigation, incident response, reporting, and remediation
• Familiarity with Kubernetes, Docker, and cloud-native services, particularly within GCP, is preferred. Proficiency with open-source security tools and technologies.
• Scripting or automation experience using Python, Bash, PowerShell, or similar languages is a plus. Security certifications such as Security+, CEH, OSCP, or relevant cloud security certifications are desirable.
• Ability to work independently, collaborate effectively with cross-functional teams, and operate effectively under pressure.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to manage multiple priorities and work in a 24x7 security operations environment, including on-call support as required.
• Curious, self-motivated, and willing to take ownership of new security challenges and responsibilities.