{"id":20222,"url":"https://alion.io/job/ghx-cyber-security-engineer-iii-1612","title":"Security Engineer III","company":{"id":5738,"name":"GHX","domain":"ghx.com","url":"https://alion.io/company/ghx","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":83,"open_postings":12,"ghost_share":0,"stale_share":0.667,"repost_share":0,"time_to_fill_p50_days":54,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":11500,"max_usd":27000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":774},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EC2","optional":false},{"name":"Amazon ECS","optional":false},{"name":"Amazon EKS","optional":false},{"name":"Amazon S3","optional":false},{"name":"Amazon SageMaker","optional":false},{"name":"AWS","optional":false},{"name":"AWS Bedrock","optional":false},{"name":"AWS Lambda","optional":false},{"name":"Boto3","optional":false},{"name":"CI/CD","optional":false},{"name":"Git","optional":false},{"name":"GitHub","optional":false},{"name":"GitLab","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"LangChain","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"OpenAI","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Shift-Left","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Wiz","optional":false},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-05-14T05:56:37Z","employer_posted_date":"2026-09-10","last_verified_at":"2026-10-20T10:20:08Z","board_verified":true,"closed_at":null,"days_open":159,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":158},"description":"Role: Security Engineer III\nLocation: Hyderabad, India (Hybrid)\nDepartment: Infrastructure/Info Security\nAbout GHX:\nGHX (Global Healthcare Exchange) is a leading healthcare technology company on a mission to simplify the business of healthcare and improve patient outcomes. Founded in 2000, GHX has built the GHX Global Network - the world’s largest cloud-based supply chain community connecting healthcare providers, suppliers, distributors, and partners to automate key processes, reduce costs, and increase operational efficiency. Its solutions span electronic trading, procurement automation, inventory and contract management, business intelligence, and data synchronization, helping healthcare organizations improve productivity and focus more on patient care. Over the years, GHX has enabled significant cost savings for the industry and continues to innovate with intelligent automation and AI-driven capabilities.\nWebsite: https://www.ghx.com/\nLinkedIn: https://www.linkedin.com/company/ghx/\nRole Overview \nWe are seeking a highly skilled Cybersecurity Engineer with 4+ years of experience to secure our production AWS ecosystems and modern AI-driven application pipelines. In this business-critical role, you will take operational ownership of the entire Wiz Cloud Native Application Protection Platform (CNAPP) suite. You will bridges the gap between infrastructure protection and software development by deploying Wiz Code and Wiz Code to Cloud architectures, tracing software defects, vulnerabilities, and hardcoded secrets directly from git environments up to running containerized architectures. Additionally, you will design guardrails protecting LLM structures and pipeline environments from next-generation adversarial patterns. \nKey Responsibilities \nShift-Left Security & Wiz Portfolio Ownership \nWiz CNAPP: Architect, configure, and maintain the Wiz CNAPP suite globally across our AWS enterprise structure, leveraging security graphs to aggregate risk profiles. \n Wiz Code Deployment: Integrate Wiz Code natively within engineering workflows, provisioning scanning capabilities across Git platforms (GitHub/GitLab) and automated CI/CD engines. \nCode to Cloud Traceability: Leverage Wiz Code to Cloud context to instantly map live, running AWS workload exploits back to distinct repository blocks, code branches, and specific developers to isolate structural roots. \n Supply Chain Assurance: Analyze and intercept Software Composition Analysis (SCA) alerts, malicious package risks, hardcoded infrastructure secrets, and broken Infrastructure as Code (IaC) architectures prior to merge pipelines. \nAWS Cloud Infrastructure Security \nGraph Risk Analytics: Isolate toxic combinations within the Wiz Security Graph, evaluating attack paths that bind internet exposure, workload misconfigurations, vulnerable packages, and excess IAM capabilities together. \n Least Privilege Enforcement: Implement Cloud Infrastructure Entitlement Management (CIEM) reviews to detect and lock down excessive permissions on AWS resources (ECS, EC2, S3, EKS, AWS Lambda). \n Automated Compliance: Translate framework regulations (CIS AWS Foundations Benchmark, SOC 2, ISO 27001) into active compliance monitoring tracks across codebases and clouds. \nAI/ML Pipeline & LLM Engineering Guardrails \nPipeline Hardening: Deconstruct risks and deliver secure engineering patterns across AWS native platforms including Amazon Bedrock, SageMaker, and specialized training cluster nodes. \nAdversarial Defense: Construct mitigations targeting prompt injection tactics, training set data poisoning vectors, model inversion mechanics, and SSRF flaws inside runtime configurations. \nLLM Security Governance: Enforce guardrails modeled after the OWASP Top 10 for LLM Applications alongside MITRE ATLAS matrix standards. \nIncident Support & DevSecOps Collaboration \nAutomated Guardrails: Convert high-fidelity Wiz risk data into automated enforcement blockers inside continuous deployment workflows. \nIncident Tracing: Assist internal Security Operations with telemetry context during threat activities, blending Wiz insights, AWS CloudTrail, and GuardDuty payloads. \nSecurity Advocacy: Co-author engineering guidelines alongside product teams to embed secure-by-design patterns cleanly across everyday development lifecycles. \nRequired Skills & Qualifications \nTechnical Experience \nProfessional Experience: 4+ years of focused technical practice in DevSecOps, Enterprise Application Security, or Cloud Security engineering roles. \nWiz Competency: 1 to 2+ years of hands-on platform administration across Wiz CNAPP, including proven deployment depth utilizing Wiz Code or Wiz Code to Cloud pipelines. \nAWS Ecosystem Mastery: Deep structural knowledge of AWS IAM, KMS, Security Hub, CloudTrail, GuardDuty, VPC topologies, and multi-account Organization structures. \n AI/ML Engineering Exposure: Familiarity securing AI interfDaces (OpenAI API, Amazon Bedrock, SageMaker) and hardening orchestration components like LangChain or vector databases. \nInfrastructure as Code: Deep fluency reading, validating, and writing secure Infrastructure as Code manifests, specifically Terraform. \n Automation Scripting: Competency engineering automation routines using Python (Boto3) or Shell scripts to handle automated ingestion or compliance fixes. \nSoft Skills & Certifications \nEngineering Collaboration: Proven track record collaborating closely with platform engineers to remediate deep code issues without stalling continuous delivery cycles. \n Certifications (Preferred): AWS Certified Security - Specialty, Certified DevSecOps Professional (CDP), CCSP, or specialized cloud native security architecture validations. \nGHX: It's the way you do business in healthcare\nGlobal Healthcare Exchange (GHX) enables better patient care and billions in savings for the healthcare community by maximizing automation, efficiency and accuracy of business processes.\nGHX is a healthcare business and data automation company, empowering healthcare organizations to enable better patient care and maximize industry savings using our world class cloud-based supply chain technology exchange platform, solutions, analytics and services. We bring together healthcare providers and manufacturers and distributors in North America and Europe - who rely on smart, secure healthcare-focused technology and comprehensive data to automate their business processes and make more informed decisions.\nIt is our passion and vision for a more operationally efficient healthcare supply chain, helping organizations reduce - not shift - the cost of doing business, paving the way to delivering patient care more effectively. Together we take more than a billion dollars out of the cost of delivering healthcare every year. GHX is privately owned, operates in the United States, Canada and Europe, and employs more than 1000 people worldwide. Our corporate headquarters is in Colorado, with additional offices in Europe.\nDisclaimer\nGlobal Healthcare Exchange, LLC and its North American subsidiaries (collectively, “GHX”) provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, national origin, sex, sexual orientation, gender identity, religion, age, genetic information, disability, veteran status or any other status protected by applicable law. All qualified applicants will receive consideration for employment without regard to any status protected by applicable law. This EEO policy applies to all terms, conditions, and privileges of employment, including hiring, training and development, promotion, transfer, compensation, benefits, educational assistance, termination, layoffs, social and recreational programs, and retirement.GHX believes that employees should be provided with a working environment which enables each employee to be productive and to work to the best of his or her ability. We do not condone or tolerate an atmosphere of intimidation or harassment based on race, color, national origin, sex, sexual orientation, gender identity, religion, age, genetic information, disability, veteran status or any other status protected by applicable law. GHX expects and requires the cooperation of all employees in maintaining a discrimination and harassment-free atmosphere. Improper interference with the ability of GHX’s employees to perform their expected job duties is absolutely not tolerated.\nRead our GHX Privacy Policy","description_format":"text","description_chars":8455,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"phd","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Health Care","B2B Commerce","Hospital Operations Software","Supply Chain & Logistics Software"],"lifecycle":[{"event":"open","at":"2026-05-14T05:56:37Z"},{"event":"close","at":"2026-09-07T20:39:13Z"},{"event":"reopen","at":"2026-09-10T15:10:15Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.388,"p_room":0.28,"age_days":158,"expected_fill_days":54,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/ghx-cyber-security-engineer-iii-1612","json_url":"https://alion.io/job/ghx-cyber-security-engineer-iii-1612.json","meta":{"generated_at":"2026-10-20T13:35:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15117,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5738},"rest":"https://alion.io/mcp/rest/get_company?id=5738"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fghx-cyber-security-engineer-iii-1612"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fghx-cyber-security-engineer-iii-1612"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fghx-cyber-security-engineer-iii-1612"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ghx-cyber-security-engineer-iii-1612\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fghx-cyber-security-engineer-iii-1612"}]}