Principal Security Manager (India)

Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough medical discoveries, accelerate regulatory-grade evidence, and improve patient care. Today, Truveta enables research on more than 130 million de-identified patients across the US.  

Achieving Truveta’s ambitious mission requires an incredible team of talented and inspired people with a special combination of health, software and big data experience who share our company values. 

Role Overview  

We are looking for a Principal Security Engineering Manager  to own and drive security across applications, cloud infrastructure, and platform operations. 

This role requires a hands-on technical leader  who can design and implement security controls end-to-end while partnering closely with engineering teams. The ideal candidate brings a strong mix of software engineering, cloud architecture, and security expertise, with the ability to scale security practices in a modern, cloud-native environment. 

Key Responsibilities  

• Lead the design and implementation of security controls across the full technology stack, including applications, services, and cloud infrastructure.  

• Establish and drive secure development practices, integrating security into CI/CD pipelines and developer workflows.  

• Own programs for identifying and addressing risks, including:  

• Vulnerability discovery and remediation  

• Application and infrastructure testing  

• Continuous validation of security posture  

• Define and implement data protection strategies, including encryption, access controls, and data handling standards.  

• Conduct and govern security assessments  for both internally developed systems and external vendors/partners.  

• Build and enhance identity and access control systems, ensuring least privilege and strong authentication mechanisms.  

• Develop and mature logging, monitoring, and detection capabilities  to identify and respond to threats effectively.  

• Strengthen threat detection and incident response readiness  through automation, telemetry, and engineering-driven approaches.  

• Design and secure cloud and network architectures, including edge protection, traffic filtering, and service isolation.  

• Drive adoption of modern security architectures  such as zero trust and defense-in-depth.  

• Integrate security into emerging technologies, including AI/ML systems, ensuring protection against data leakage and model abuse.  

• Partner with engineering, platform, and product teams to embed security into system design and architecture decisions.  

• Lead by example as a hands-on engineer, contributing to design reviews, code, and automation where needed.  

• Mentor and guide engineers, raising the overall security and engineering maturity  of the organization.  

Required Qualifications  

• 12-16+ years of experience in security engineering, software engineering, or cloud security.  

• Strong background in  software development or DevOps, with the ability to build or review code and automation.  

• Deep understanding of:  

• Secure application design and common vulnerabilities  

• Cloud platforms (Azure preferred) and distributed systems  

• Identity systems and access control models  

• Monitoring, detection, and response mechanisms  

• Network and edge security principles  

• Experience implementing security at scale in cloud-native environments.  

• Proven ability to balance strategic thinking with hands-on execution.  

• Strong communication skills with the ability to influence engineering and leadership teams.  

Preferred Qualifications  

• Experience in  regulated environments  (e.g., healthcare, finance).  

• Familiarity with modern AI/ML security considerations.  

• Experience with  large-scale telemetry and detection systems  (e.g., SIEM platforms).  

• Knowledge of  industry standards and compliance frameworks.  

• Relevant certifications (e.g., CISSP, OSCP, cloud security certifications).  

What We’re Looking For  

• A builder and problem-solver  who can operate across multiple layers of the stack.  

• Someone who naturally bridges engineering and security  rather than treating them separately.  

• A leader who can simplify and unify security practices  across teams.  

• Strong ownership mindset with the ability to  drive outcomes in a complex environment.