Position: Security and Compliance Engineer
Immediate Only
Engagement Mode: Contract (3 Month Extendable)
Location: Remote

Position Overview:
We are seeking a Security and Compliance Engineer to provide end-to-end security and compliance
oversight for the delivered solution. The role involves configuring AWS IAM least-privilege roles and KMS
encryption, running automated OWASP vulnerability and container scans, resolving all security audit findings
to reach zero open findings (milestone M10), and ensuring HIPAA compliance. Remediation is applied to the
code and container images delivered by Celsior and tracked in the CI pipeline. Findings in Glytec-owned
components (Inter Systems, existing tooling) are excluded unless separately scoped.

Key Responsibilities:
Provide end-to-end security and compliance oversight
Configure AWS IAM least-privilege roles
Configure AWS KMS encryption




Execute automated OWASP vulnerability scans
Execute automated container security scans
Resolve all security audit findings to achieve zero findings (M10)
Ensure HIPAA compliance
Apply remediation to the code and container images delivered by Celsior and track it in the CI pipeline
Exclude findings in Glytec-owned components (Inter Systems, existing tooling) unless separately scoped

Required Skills:
AWS IAM
AWS KMS
OWASP Top 10
Static & Energetic Security Scanning (SAST/DAST)
Container Security (Trivy/Prisma)
FedRAMP/Moderate
SOC2
HIPAA/HITRUST Compliance
Vulnerability Remediation

Vendor Name

Candidate Name

M. No

Candidate Email

Skill

Experience

Notice Period

Location

Rate Card

📌 Security and Compliance Engineer (India)
🏢 Sparix Global
📍 India