SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Innovaccer is seeking a Security Engineer II for Product Security to own end-to-end security across their healthcare platform. This role spans multiple security domains including application security (web, mobile, desktop), data security, cloud security, and automation/VAPT.
Key responsibilities include conducting black-box, white-box, and grey-box penetration testing; performing AI/LLM security assessments aligned with OWASP LLM Top 10; conducting security architecture reviews and threat modeling for new products and features; assessing applications against OWASP Top 10, API Security Top 10, and LLM Top 10 standards; and collaborating with Product, Engineering, DevOps, and Infrastructure teams to remediate vulnerabilities and implement secure-by-design principles.
You will provide security guidance throughout the Secure Software Development Lifecycle, including design reviews, code reviews, and release assessments. Additional responsibilities include cloud security assessments across AWS, Azure, and GCP; implementing and testing Business Continuity and Disaster Recovery solutions; developing security dashboards and metrics; creating automation scripts for penetration testing and vulnerability validation; supporting incident response; and participating in a 24x7 on-call rotation.
Required qualifications: Bachelor's degree in Computer Science, IT, Cybersecurity, or related field; 3–5 years in Product Security, Application Security, or Penetration Testing; hands-on experience with tools like Burp Suite, OWASP ZAP, Nmap, Nessus, SQLMap, and Metasploit; familiarity with SAST, DAST, SCA, container security, and IaC tools; AWS, Azure, and GCP cloud security experience; strong networking fundamentals; scripting skills in Python, Bash, or PowerShell; and strong analytical and communication abilities. Preferred: OSCP, OSWE, CEH, or AWS Security Specialty certifications; AI/LLM security testing experience; and proficiency with open-source security tools.
