Description
Role: Security Engineer III
Location: Hyderabad, India (Hybrid)
Department: Infrastructure/Info Security
About GHX:
GHX (Global Healthcare Exchange) is a leading healthcare technology company on a mission to simplify the business of healthcare and improve patient outcomes. Founded in 2000, GHX has built the GHX Global Network — the world’s largest cloud-based supply chain community connecting healthcare providers, suppliers, distributors, and partners to automate key processes, reduce costs, and increase operational efficiency. Its solutions span electronic trading, procurement automation, inventory and contract management, business intelligence, and data synchronization, helping healthcare organizations improve productivity and focus more on patient care. Over the years, GHX has enabled significant cost savings for the industry and continues to innovate with intelligent automation and AI-driven capabilities.
Website: https://www.ghx.com/
LinkedIn: https://www.linkedin.com/company/ghx/
Role Overview
We are seeking a highly skilled Cybersecurity Engineer with 4+ years of experience to secure our production AWS ecosystems and modern AI-driven application pipelines. In this business-critical role, you will take operational ownership of the entire Wiz Cloud Native Application Protection Platform (CNAPP) suite. You will bridges the gap between infrastructure protection and software development by deploying Wiz Code and Wiz Code to Cloud architectures, tracing software defects, vulnerabilities, and hardcoded secrets directly from git environments up to running containerized architectures. Additionally, you will design guardrails protecting LLM structures and pipeline environments from next-generation adversarial patterns.
Key Responsibilities
Shift-Left Security & Wiz Portfolio Ownership
- Wiz CNAPP: Architect, configure, and maintain the Wiz CNAPP suite globally across our AWS enterprise structure, leveraging security graphs to aggregate risk profiles.
- Wiz Code Deployment: Integrate Wiz Code natively within engineering workflows, provisioning scanning capabilities across Git platforms (GitHub/GitLab) and automated CI/CD engines.
- Code to Cloud Traceability: Leverage Wiz Code to Cloud context to instantly map live, running AWS workload exploits back to distinct repository blocks, code branches, and specific developers to isolate structural roots.
- Supply Chain Assurance: Analyze and intercept Software Composition Analysis (SCA) alerts, malicious package risks, hardcoded infrastructure secrets, and broken Infrastructure as Code (IaC) architectures prior to merge pipelines.
AWS Cloud Infrastructure Security
- Graph Risk Analytics: Isolate toxic combinations within the Wiz Security Graph, evaluating attack paths that bind internet exposure, workload misconfigurations, vulnerable packages, and excess IAM capabilities together.
- Least Privilege Enforcement: Implement Cloud Infrastructure Entitlement Management (CIEM) reviews to detect and lock down excessive permissions on AWS resources (ECS, EC2, S3, EKS, AWS Lambda).
- Automated Compliance: Translate framework regulations (CIS AWS Foundations Benchmark, SOC 2, ISO 27001) into active compliance monitoring tracks across codebases and clouds.
AI/ML Pipeline & LLM Engineering Guardrails
- Pipeline Hardening: Deconstruct risks and deliver secure engineering patterns across AWS native platforms including Amazon Bedrock, SageMaker, and specialized training cluster nodes.
- Adversarial Defense: Construct mitigations targeting prompt injection tactics, training set data poisoning vectors, model inversion mechanics, and SSRF flaws inside runtime configurations.
- LLM Security Governance: Enforce guardrails modeled after the OWASP Top 10 for LLM Applications alongside MITRE ATLAS matrix standards.
Incident Support & DevSecOps Collaboration
- Automated Guardrails: Convert high-fidelity Wiz risk data into automated enforcement blockers inside continuous deployment workflows.
- Incident Tracing: Assist internal Security Operations with telemetry context during threat activities, blending Wiz insights, AWS CloudTrail, and GuardDuty payloads.
- Security Advocacy: Co-author engineering guidelines alongside product teams to embed secure-by-design patterns cleanly across everyday development lifecycles.
Required Skills & Qualifications
Technical Experience
- Professional Experience: 4+ years of focused technical practice in DevSecOps, Enterprise Application Security, or Cloud Security engineering roles.
- Wiz Competency: 1 to 2+ years of hands-on platform administration across Wiz CNAPP, including proven deployment depth utilizing Wiz Code or Wiz Code to Cloud pipelines.
- AWS Ecosystem Mastery: Deep structural knowledge of AWS IAM, KMS, Security Hub, CloudTrail, GuardDuty, VPC topologies, and multi-account Organization structures.
- AI/ML Engineering Exposure: Familiarity securing AI interfDaces (OpenAI API, Amazon Bedrock, SageMaker) and hardening orchestration components like LangChain or vector databases.
- Infrastructure as Code: Deep fluency reading, validating, and writing secure Infrastructure as Code manifests, specifically Terraform.
Similar jobs
Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough med…
About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to…
Est. 120,000 PLN
Welcome to the future of cloud networking and security! Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by n…
Est. 90,000 EUR
Welcome to the future of cloud networking and security! Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by n…
Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough med…
Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough med…
Est. 250,000 USD
We’re looking for a Principal Architect to lead the design and delivery of complex, multi-domain systems spanning cloud, data, and AI. This role is ideal for a deeply experienced engineer who owns the hardest architectur…
Est. 120,000 USD
Most companies claim to have the best people. We say to them, "Keep dreaming." Our people are second to none. They set us apart with their entrepreneurial spirit and ambition. They come to us from the likes of Amazon, Mi…
Est. 250,000 USD
We’re looking for a Principal Architect to lead the design and delivery of complex, multi-domain systems spanning cloud, data, and AI. This role is ideal for a deeply experienced engineer who owns the hardest architectur…
Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough med…
Est. 124,000 USD
Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology. By bringing the expertise, technology, and business model of the 21st century…
Est. 124,000 USD
Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology. By bringing the expertise, technology, and business model of the 21st century…
Est. 140,000 USD
About the Role iCapital is looking to hire a Manager for DevOps and DBA Engineering Manager to join the Annuities Platform team. This role is responsible for leading the strategy, design, and execution of DevOps practice…
Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough med…
Est. 144,000 USD
CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warf…
At Anaplan, we are a team of innovators focused on optimizing business decision-making through our leading AI-infused scenario planning and analysis platform so our customers can outpace their competition and the market.…
At Varicent, we’re not just transforming the Sales Performance Management (SPM) market—we’re redefining how organizations achieve revenue success. Our cutting-edge SaaS solutions empower revenue leaders globally to desig…
Est. 144,000 USD
CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warf…
Est. 144,000 USD
CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warf…
Black Duck Software, Inc. helps organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, a…
Est. 120,000 PLN
EBS is a rapidly expanding, entrepreneurial technology company and part of Alarm.com. Alarm.com is the leading cloud-based platform for smart security and the Internet of Things. More than 7.6+ million home and business…
Est. 141,000 USD
Cloud Architect Location: Houston, TX This is a 4 month assignment with potential to extend Houston, local OR be able to travel to Houston, TX to be at customer site every other week for a 4-5days/week Company Overview R…
Est. 165,000 USD
At Wilson Elser, we are redefining what it means to work at a national law firm. With more than 1,400 attorneys across 46 offices nationwide, we are recognized among the top 100 law firms by The American Lawyer and ranke…
Est. 80,000 EUR
At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As part of our global team, you'll thriv…
Est. 140,000 USD
Black Duck Software, Inc. helps organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, a…
Welcome to the future of cloud networking and security! Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by n…
Est. 90,000 GBP
Who are we? Ensono is a global technology services provider dedicated to helping organizations navigate the complexity of digital transformation. Through Ensono Product, Consulting & Technology, our dedicated consult…
Est. 840,000 SEK
About Keyfactor Our mission is to securely connect the world: humans, machines, and AI. Keyfactor is the leader in trust infrastructure for AI and machines, helping the world's largest enterprises and government agencies…
Est. 250,000 USD
About the Role: PubMatic is seeking a Director of Information Security to lead and evolve our global security program across enterprise infrastructure, cloud platforms, products, corporate systems, and emerging AI techno…
Est. 175,000 USD
About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to…