About Us:

Svast is a US-based revenue cycle management and medical billing company serving 200+ physician practices, with a team of about 230 people across the US and India.

We don’t just use software - we build it. Our in-house engineering team develops and runs our own cloud platforms for claims processing, payer data, credentialing and analytics, and we’re building a recent practice management platform from the ground up on AWS. Because these systems handle sensitive patient and financial data, security isn’t a side task here; it’s part of how we design, build and ship.

Position Summary:

We’re hiring our first dedicated security engineer to own the security of our applications, cloud and network. You’ll sit between our developers and our IT/infrastructure team: reviewing designs and code, building security checks into our deployment pipelines, hardening AWS and Azure, and helping us respond when something looks wrong.

This is a hands-on engineering role, not a helpdesk or paperwork role. You’ll report directly to our Systems Director and have real influence over how a growing engineering organization handles security.

What you’ll work onApplication security

- Run threat modelling and security design reviews for new features, APIs and integrations before they’re built.
- Review code (TypeScript/Node.js, Next.js, Python) for authentication, authorization, input handling and data-exposure issues against the OWASP Top 10 and OWASP API Security Top 10.
- Build security into our GitHub Actions pipelines: static analysis (SAST), dependency and container image scanning, secrets detection and infrastructure-as-code checks.
- Coordinate penetration tests, triage findings and work with developers until fixes ship.
- Guide secure handling of secrets, encryption at rest and in transit, and key management (AWS KMS).




- Review third-party APIs and partner integrations for security before they connect to our systems.

Cloud and network security
- Design and harden AWS networking — VPCs, subnets, security groups, WAF, load balancers — and Azure VNets/NSGs for our Windows server workloads.
- Enforce least-privilege IAM across AWS and Azure, including roles for Lambda, ECS and CI/CD.
- Set up and tune security logging and alerting (CloudTrail, GuardDuty, Security Hub, Microsoft Defender) and lead investigation when alerts fire.
- Manage VPN, DNS and TLS certificate configuration with our network administrator.
- Run vulnerability scanning and drive patching across cloud servers and containers.
- Contribute to infrastructure-as-code (AWS SAM/CloudFormation, Terraform) so secure defaults are built in.

Identity and endpoints
- Partner with IT on Microsoft Entra ID (conditional access, MFA), Intune device compliance and Defender for Endpoint across our cloud-only Microsoft 365 environment.

Security program
- Help maintain our security standards, risk register and vendor security reviews.
- Provide technical evidence for our SOC 2 audit and contribute to staff security awareness.

Our stackApplications: TypeScript, Node.js, Next.js (pnpm monorepo), PostgreSQL AWS: Lambda, S3, RDS, EC2, ECS/ECR, Amplify, SES

CI/CD: GitHub, GitHub Actions, AWS SAM; dev/UAT/prod environments

Azure: Windows Server virtual machines, Remote Desktop Services

Identity and devices: Microsoft 365, Entra ID (cloud-only), Intune, Defender, Windows 365 Cloud PC





Integrations: Healthcare EDI APIs and partner REST APIs

What we’re looking for

- 3+ years in security engineering, DevSecOps, cloud/network engineering, or software development with a strong security focus.
- Hands-on AWS security experience: IAM, VPC networking, security groups, KMS, CloudTrail or Guard Duty.
- Solid application security fundamentals: OWASP Top 10, secure code review, and authentication patterns (OAuth 2.0/OpenID Connect, JWT, RBAC).
- Able to read and review code in JavaScript/TypeScript or Python.
- Experience adding security tools to a CI/CD pipeline (GitHub Actions, GitLab CI, Jenkins or similar).
- Strong networking fundamentals: TCP/IP, subnetting, DNS, VPN, firewalls, TLS, load balancing.
- Scripting in Python, Bash or PowerShell.
- Bachelor’s degree in computer science, IT or a related field, or equivalent experience.
- Clear written English and the ability to work US Eastern business hours from a reliable, secure home setup.

Nice to have
- Azure security, Entra ID, Intune or Microsoft Defender experience.
- Terraform, Docker and container security.
- Tools such as Burp Suite, OWASP ZAP, Semgrep, Snyk, Trivy or Nmap.
- Certifications such as AWS Certified Security – Specialty, AZ-500, CompTIA Security+, CCNA/CCNP Security, CEH or OSCP.
- Experience in a regulated industry (healthcare, fintech, insurance) or with SOC 2, ISO 27001 or HIPAA. Not required — we’ll teach you the healthcare side.

Why join us
- Be the security engineer who shapes how a growing engineering team builds — including a brand-new platform built from scratch on AWS.
- Work on a modern cloud stack with real production systems, not a ticket queue.
- Report directly to the Systems Director, with room to choose tools and set standards.
- Fully remote, work from home.

📌 IT-Network & Application Security Engineer (India)
🏢 Svast Healthcare Technologies
📍 India