Cyber Security Engineer

About the role

As a Cybersecurity Engineer you will own the security posture of the company’s AWS cloud infrastructure and its Python/Django, FastAPI, Node.js and React applications. You will discover real vulnerabilities, fix them or drive remediation, and build automated controls that prevent recurrence. This is a hands‑on, technical role working directly with engineering teams.

Key responsibilities

• Perform secure code reviews across Python/Django/FastAPI, Node.js and React/TypeScript codebases and threat‑model new features.
• Own SAST, DAST, dependency, secret and container scanning, triage findings and drive fixes.
• Conduct white‑box, grey‑box and black‑box security testing of applications and APIs, hunting for IDOR, privilege escalation and tenant data leakage.
• Harden AWS infrastructure (IAM, VPC, encryption, logging) and review Terraform IaC for security defects.
• Secure containerized workloads (Docker, ECS/Fargate or EKS), manage secrets and key rotation.
• Build detection and alerting, lead incident response and manage end‑to‑end vulnerability management.
• Implement and evidence HIPAA and SOC 2 controls, embed security checks into CI/CD pipelines.

Required profile

• 6+ years of experience in cybersecurity with strong application and cloud security ownership.
• Bachelor’s or Master’s degree in Computer Science, Information Security or related field.
• Deep knowledge of AWS security services and common misconfiguration patterns.
• Ability to read and reason about production code, Python preferred.
• Hands‑on experience with OWASP Top 10 testing, SAST/DAST/SCA and container scanning tools.

Required skills

• AWS (IAM, VPC, encryption, logging)
• Python, JavaScript/TypeScript
• Docker, ECS/Fargate, EKS
• Terraform, GitHub Actions
• SAST, DAST, SCA, container scanning
• PostgreSQL, Kafka

What we offer

• Security ownership of a healthcare platform handling real patient data.
• Broad exposure across application, cloud and operational security.
• Modern tech stack: AWS, Terraform, Docker, Python, React, PostgreSQL, Kafka.
• Direct influence on architecture and engineering practices.