{"id":2527429,"url":"https://alion.io/job/practice-numbers-cybersecurity-engineer-engineering","title":"Cybersecurity Engineer – Engineering","company":{"id":2763798,"name":"Practice Numbers","domain":"practicenumbers.com","url":"https://alion.io/company/practicenumbers","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Gem","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Gurgaon, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":17500,"max_usd":40000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":9},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon ECS","optional":false},{"name":"Amazon EKS","optional":false},{"name":"Amazon S3","optional":false},{"name":"Apache Kafka","optional":false},{"name":"AWS","optional":false},{"name":"AWS Fargate","optional":false},{"name":"Burp Suite","optional":false},{"name":"Checkov","optional":false},{"name":"CI/CD","optional":false},{"name":"Django","optional":false},{"name":"Docker","optional":false},{"name":"FastAPI","optional":false},{"name":"GitHub Actions","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"JavaScript","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"NIST CSF","optional":false},{"name":"Node JS","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"PostgreSQL","optional":false},{"name":"Python","optional":false},{"name":"React.js","optional":false},{"name":"Redis","optional":false},{"name":"Redpanda","optional":false},{"name":"Rest API","optional":false},{"name":"Semgrep","optional":false},{"name":"SIEM","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"SOC 2","optional":false},{"name":"SOPS","optional":false},{"name":"STRIDE","optional":false},{"name":"Terraform","optional":false},{"name":"tfsec","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Trivy","optional":false},{"name":"TypeScript","optional":false},{"name":"Vault","optional":false},{"name":"Kubernetes","optional":true},{"name":"LLM","optional":true},{"name":"Red Teaming","optional":true}],"status":"live","first_seen_at":"2026-09-03T13:10:20Z","employer_posted_date":"2026-09-03","last_verified_at":"2026-10-14T23:11:09Z","board_verified":true,"closed_at":null,"days_open":41,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":41},"description":"Cybersecurity Engineer - Engineering\nExperience: 6+ Years\nLocation: Kolkata, India / Gurgaon, India (On-site)\nReports to: Head of Engineering / Security Lead\nEmployment Type: Full-time\nAbout Practice by Numbers\nPractice by Numbers (PbN) is a fast-growing SaaS platform helping healthcare organizations leverage data, automation, patient engagement, and operational intelligence to improve business performance and patient outcomes. We build highly scalable cloud-native products serving thousands of customers across North America.\nWe handle protected health information at scale. Security is not a compliance checkbox for us - it is a product requirement. We are looking for a Cybersecurity Engineer who can secure a live, fast-moving cloud platform hands-on.\nRole Overview\nAs a Cybersecurity Engineer, you will own the security posture of our AWS cloud infrastructure and our Python/Django, FastAPI, Node.js, and React applications. You will find real vulnerabilities, fix them or drive them to closure, and build the controls and automation that stop the same class of issue from recurring.\nThis is a hands-on, technical role. You will read code, review architecture, run tests against our own systems, tune detections, respond to incidents, and carry the technical side of our HIPAA and SOC 2 obligations. You will work directly with engineering rather than filing findings over a wall.\nThe ideal candidate has genuine application and cloud security depth, understands how software is actually built and deployed, and can tell a real risk from a scanner artifact.\nKey Responsibilities\nApplication Security\nPerform secure code reviews across Python/Django/FastAPI, Node.js, and React/TypeScript codebases. \nThreat model new features and services; identify design-level risks before they ship. Own SAST, DAST, dependency, secret, and container scanning - including triage, false-positive reduction, and driving fixes to closure. \nRun white-box (source-assisted), grey-box (authenticated, partial-knowledge), and black-box (external, zero-knowledge) security testing against our own applications and APIs. \nTest authentication, authorization, multi-tenant isolation, and session handling; hunt for IDOR, privilege escalation, and tenant data leakage.\nReview API security: input validation, rate limiting, authorization enforcement, and data exposure. Define and maintain secure coding standards; coach engineers through review rather than mandate. \nCloud & Infrastructure Security\nHarden AWS infrastructure - IAM least privilege, VPC and network segmentation, security groups, encryption at rest and in transit, S3 and RDS controls. \nReview Terraform and infrastructure-as-code for security defects; add policy-as-code guardrails. Secure containerized workloads (Docker, ECS/Fargate or EKS) - image hygiene, runtime configuration, secrets handling. \nOwn secrets management practices (AWS Secrets Manager, SOPS, Vault) and key rotation. Continuously audit cloud configuration drift and remediate exposure. \nSecurity Operations & Incident Response\nBuild and tune detection and alerting across cloud, application, and access logs. Investigate security alerts; separate real signal from noise. \nLead incident response - containment, forensics, root cause, and blameless post-incident review. Maintain and exercise the incident response plan, including breach-notification readiness. Run vulnerability management end to end: discovery, risk-based prioritization, SLA tracking, verification. \nCompliance & Governance (Technical Ownership)\nOwn the engineering side of HIPAA and SOC 2 - implement controls, produce evidence, and support audits. \nMaintain audit logging, access review, data retention, and encryption controls. Support security questionnaires, customer security reviews, and third-party/vendor assessments. Coordinate external penetration tests and drive remediation of findings. \nKeep security policies and technical documentation accurate as systems change. \nSecurity Engineering & Automation\nEmbed security checks into CI/CD (GitHub Actions) so issues surface at pull-request time. Write Python and shell automation for evidence collection, configuration auditing, and remediation. \nBuild tooling and guardrails that make the secure path the easy path for engineers. Improve identity and access management across cloud, SaaS, and internal tooling. \nCollaboration & Enablement\nPartner with engineering, DevOps, and product teams as an embedded security reviewer. Run practical security training and awareness for engineering. \nCommunicate risk clearly to both technical and non-technical audiences, with a recommendation attached. \nAI-Enabled Engineering\nUse modern AI tools to accelerate code review, detection engineering, and analysis.\nApply AI-assisted practices while maintaining rigorous verification, data-handling, and review standards. \nAssess and secure the organization’s own use of AI services, including data-exposure risk. \nRequired Qualifications\nBachelor’s or Master’s degree in Computer Science, Information Security, or a related discipline. 6+ years in cybersecurity, with substantial application security or cloud security ownership. Strong AWS security experience - IAM, VPC networking, encryption, logging, and common misconfiguration patterns. \nAbility to read and reason about production code; Python strongly preferred, plus JavaScript/TypeScript. \nHands-on web application and API security testing (OWASP Top 10, OWASP API Security Top 10) using black-box, grey-box, and white-box approaches. \nAbility to write up findings with reproducible steps, impact, severity rationale, and a concrete remediation path. \nPractical experience with SAST/DAST/SCA and container scanning tooling, including triage and remediation. \nWorking knowledge of Docker and container orchestration (ECS/Fargate or EKS). Experience with vulnerability management and incident response in production environments. Familiarity with HIPAA, SOC 2, or equivalent compliance frameworks. \nSolid Linux fundamentals, networking, and cryptography basics. \nClear written and verbal English; ability to document findings and risk decisions precisely. \nTechnical Expertise\nApplication Security\nSecure Code Review (Python / Django / FastAPI, Node.js, React / TypeScript) Threat Modeling (STRIDE or equivalent) \nOWASP Top 10 / OWASP API Security Top 10 \nAuthentication, Authorization, Multi-Tenant Isolation \nBlack-Box / Grey-Box / White-Box Penetration Testing \nManual Exploitation and Proof-of-Concept Development \nSAST / DAST / SCA, Secret and Dependency Scanning \nBurp Suite, OWASP ZAP, Semgrep, Trivy, and similar tooling \nCloud & Infrastructure Security\nAWS IAM, VPC, Security Groups, KMS, GuardDuty, Security Hub, CloudTrail, Config ECS / Fargate / EKS Workload Security \nTerraform Security Review, Policy as Code (OPA, Checkov, tfsec)\nSecrets Management (AWS Secrets Manager, SOPS, Vault) \nNetwork Segmentation and Perimeter Controls \nSecurity Operations\nSIEM / Log Analytics and Detection Engineering \nIncident Response and Digital Forensics \nVulnerability Management and Risk-Based Prioritization \nAudit Logging, Access Review, Monitoring and Alerting \nData Protection & Compliance\nEncryption at Rest and in Transit, Key Management \nPHI / PII Handling, Data Classification, Retention \nHIPAA, SOC 2, HITRUST, NIST CSF, ISO 27001 \nVendor and Third-Party Risk Assessment \nPlatform Context\nPostgreSQL Security and Access Control \nKafka / Redpanda / Amazon MSK, Redis \nGitHub Actions and CI/CD Security \nPython and Shell Automation \nPreferred Qualifications\nSecurity certifications - OSCP, CISSP, AWS Security Specialty, GIAC (GWAPT, GCIH, GCSA), or CEH. \nExperience securing multi-tenant SaaS platforms and tenant-isolation models. Prior experience carrying a SOC 2 Type II audit or HIPAA program through to completion. Offensive security background - black-box penetration testing, red teaming, or bug bounty experience. \nExperience scoping and managing third-party black-box or grey-box penetration tests. Kubernetes security. \nExperience with event-driven architectures and message-broker security. \nDetection-as-code and security automation at scale. \nExposure to healthcare technology or other regulated domains. \nExperience securing AI/LLM-integrated applications. \nWhat We Look For\nGenuine hands-on depth - you find real issues, not just scanner output. \nEngineering mindset: you fix and automate rather than only report. \nSound risk judgment and the ability to prioritize what actually matters.\nStrong collaboration; engineers should want your review, not dread it. \nPrecise written communication and clean documentation. \nIntegrity, discretion, and ownership when handling sensitive data. \nContinuous learning as the threat landscape moves. \nWhy This Role\nSecurity ownership of a healthcare platform where the stakes are real. \nBreadth across application, cloud, and operational security in one role. \nModern stack: AWS, Terraform, GitHub Actions, Docker, Python, React, PostgreSQL, Kafka compatible messaging. \nDirect influence on architecture and engineering practice, not a downstream audit function.","description_format":"text","description_chars":9112,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Application Security"],"lifecycle":[{"event":"open","at":"2026-10-14T12:25:24Z"}],"visa":[],"liveness":{"score":26,"band":"fade","label":"Fading","p_open":1,"p_active":0.577,"p_room":0.45,"age_days":41,"expected_fill_days":23,"reasons":["conf:2","win:tail"],"computed_at":"2026-10-15T01:38:17Z"},"pay":null,"html_url":"https://alion.io/job/practice-numbers-cybersecurity-engineer-engineering","json_url":"https://alion.io/job/practice-numbers-cybersecurity-engineer-engineering.json","meta":{"generated_at":"2026-10-15T01:38:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2255,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2763798},"rest":"https://alion.io/mcp/rest/get_company?id=2763798"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpractice-numbers-cybersecurity-engineer-engineering"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpractice-numbers-cybersecurity-engineer-engineering"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpractice-numbers-cybersecurity-engineer-engineering"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/practice-numbers-cybersecurity-engineer-engineering\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpractice-numbers-cybersecurity-engineer-engineering"}]}