About Us
Svast is a US-based revenue cycle management and medical billing company serving 200+ physician practices, with a team of about 230 people across the US and India. We don’t just use software
- we build it. Our in-house engineering team develops and runs our own cloud platforms for claims processing, payer data, credentialing and analytics, and we’re building a new practice management platform from the ground up on AWS. Because these systems handle sensitive patient and financial data, security isn’t a side task here; it’s part of how we design, build and ship. Position Summary: We’re hiring our first dedicated security engineer to own the security of our applications, cloud and network. You’ll sit between our developers and our IT/infrastructure team: reviewing designs and code, building security checks into our deployment pipelines, hardening AWS and Azure, and helping us respond when something looks wrong. This is a hands-on engineering role, not a helpdesk or paperwork role. You’ll report directly to our Systems Director and have real influence over how a growing engineering organization handles security. What you’ll work onApplication security
• Run threat modelling and security design reviews for new features, APIs and integrations before they’re built.
• Review code (TypeScript/Node.js, Next.js, Python) for authentication, authorization, input handling and data-exposure issues against the OWASP Top 10 and OWASP API Security Top 10.
• Build security into our GitHub Actions pipelines: static analysis (SAST), dependency and container image scanning, secrets detection and infrastructure-as-code checks.
• Coordinate penetration tests, triage findings and work with developers until fixes ship.
• Guide secure handling of secrets, encryption at rest and in transit, and key management (AWS KMS).




• Review third-party APIs and partner integrations for security before they connect to our systems. Cloud and network security
• Design and harden AWS networking — VPCs, subnets, security groups, WAF, load balancers — and Azure VNets/NSGs for our Windows server workloads.
• Enforce least-privilege IAM across AWS and Azure, including roles for Lambda, ECS and CI/CD.
• Set up and tune security logging and alerting (CloudTrail, GuardDuty, Security Hub, Microsoft Defender) and lead investigation when alerts fire.
• Manage VPN, DNS and TLS certificate configuration with our network administrator.
• Run vulnerability scanning and drive patching across cloud servers and containers.
• Contribute to infrastructure-as-code (AWS SAM/CloudFormation, Terraform) so secure defaults are built in. Identity and endpoints
• Partner with IT on Microsoft Entra ID (conditional access, MFA), Intune device compliance and Defender for Endpoint across our cloud-only Microsoft 365 environment. Security program
• Help maintain our security standards, risk register and vendor security reviews.
• Provide technical evidence for our SOC 2 audit and contribute to staff security awareness. Our stackApplications: TypeScript, Node.js, Next.js (pnpm monorepo), PostgreSQL AWS: Lambda, S3, RDS, EC2, ECS/ECR, Amplify, SES CI/CD: GitHub, GitHub Actions, AWS SAM; dev/UAT/prod environments Azure: Windows Server virtual machines, Remote Desktop Services Identity and devices: Microsoft 365, Entra ID (cloud-only), Intune, Defender, Windows 365 Cloud PC Integrations:



Healthcare EDI APIs and partner REST APIs What we’re looking for
• 3+ years in security engineering, DevSecOps, cloud/network engineering, or software development with a strong security focus.
• Hands-on AWS security

experience:
IAM, VPC networking, security groups, KMS, CloudTrail or Guard Duty.
• Solid application security fundamentals: OWASP Top 10, secure code review, and authentication patterns (OAuth 2.0/OpenID Connect, JWT, RBAC).
• Able to read and review code in JavaScript/TypeScript or Python.
• Experience adding security tools to a CI/CD pipeline (GitHub Actions, GitLab CI, Jenkins or similar).
• Strong networking fundamentals: TCP/IP, subnetting, DNS, VPN, firewalls, TLS, load balancing.
• Scripting in Python, Bash or PowerShell.
• Bachelor’s degree in computer science, IT or a related field, or equivalent experience.
• Transparent written English and the ability to work US Eastern business hours from a reliable, secure home setup. Nice to have
• Azure security, Entra ID, Intune or Microsoft Defender experience.
• Terraform, Docker and container security.
• Tools such as Burp Suite, OWASP ZAP, Semgrep, Snyk, Trivy or Nmap.
• Certifications such as AWS Certified Security – Specialty, AZ-500, CompTIA Security+, CCNA/CCNP Security, CEH or OSCP.
• Experience in a regulated industry (healthcare, fintech, insurance) or with SOC 2, ISO 27001 or HIPAA. Not required — we’ll teach you the healthcare side. Why join us
• Be the security engineer who shapes how a growing engineering team builds — including a brand-new platform built from scratch on AWS.
• Work on a modern cloud stack with real production systems, not a ticket queue.
• Report directly to the Systems Director, with room to choose tools and set standards.
• Fully remote, work from home.

📌 IT-Network & Application Security Engineer (India)
🏢 Svast Healthcare Technologies
📍 India