Security Engineer

Hi Folks, we are currently Hiring for Security Engineer. Gemini said Hiring: Security Engineer Company : Pentabay Softwares Location : Anna salai, Mount Road Mode: Fulltime Pentabay Softwares INC is looking for a proactive Security Engineer (2–7 Years Exp) to fortify our global digital solutions. As we scale our footprint in the Healthcare IT sector, you will play a critical role in safeguarding sensitive data (ePHI) and ensuring our cloud-native architectures are resilient against evolving threats. The Mission You will be the architect of our defense, bridging the gap between high-speed development and rigorous security standards. Your day-to-day will involve shifting security left by embedding DevSecOps practices into our CI/CD pipelines and leading our compliance efforts for SOC 2, ISO 27001, and HIPAA. Key Responsibilities Defense & Architecture: Design and maintain secure cloud (AWS/Azure/GCP) and on-prem environments. Implement IAM policies, Zero Trust frameworks, and robust secrets management. Offensive Testing: Conduct regular vulnerability assessments (VAPT), penetration testing, and code reviews using tools like Burp Suite and Nessus. DevSecOps & Automation: Integrate SAST/DAST/SCA scanning into engineering workflows. Automate security tasks using Python or Bash. Incident Response: Monitor SIEM tools (Splunk/CrowdStrike), respond to threats, and develop risk mitigation strategies. Healthcare Compliance (Plus): Ensure data integrity for HL7/FHIR APIs and maintain HIPAA/HITECH audit readiness for healthcare clients. What You Bring Experience: 2–7 years in Information/Application Security with a strong grasp of the OWASP Top 10 and threat modeling (STRIDE). Technical Depth: Proficiency in network/endpoint security, PKI, encryption standards (TLS/SSL), and container security (Docker/Kubernetes). Compliance Knowledge: Familiarity with NIST, GDPR, and SOC 2 frameworks. Tools: Hands-on experience with Metasploit, Wireshark, and Infrastructure-as-Code (Terraform). Bonus Points: Industry certifications like OSCP, CISSP, or CEH, and experience in Healthcare IT workflows. Auditing space like ISO27001 , ISO9001 prefered Why Pentabay At Pentabay, we offer more than just a job; we offer a security-first engineering culture. Growth: A dedicated learning budget for certifications and conferences. Impact: Work on cutting-edge Healthcare projects that demand the highest levels of data privacy. Send resumes to : sandhiya.m at pentabay.com Skills:- ISO9001, ISO27001, Security Information and Event Management (SIEM), Cyber Security, Amazon Web Services (AWS), Windows Azure, Microsoft Windows Azure, HIPAA and Health care administration