5 months ago
Hyderābād, IndiaSenior
Responsibilities
- Lead security design reviews for new and existing systems and drive secure architecture decisions.
- Perform threat modeling for services and platforms and translate threats into actionable engineering requirements.
- Define and implement data classification, handling, encryption, key management, and secrets-handling strategies.
- Review application architectures and APIs for security weaknesses and design flaws.
- Conduct third-party and vendor security assessments and ensure risks are mitigated.
- Partner with engineering teams to remediate findings and improve system design.
- Establish secure design patterns and guidelines for developers.
- Integrate security into design and development workflows through a shift-left approach.
- Evaluate and secure AI/ML use cases, including data leakage and prompt-injection risks.
- Contribute to organization-wide security standards, policies, and best practices.
Requirements
- 8–12+ years of experience in security engineering or application security.
- Strong expertise in threat modeling and secure system design.
- Deep understanding of application security principles, OWASP Top 10, API security, data protection and privacy, and authentication and authorization mechanisms.
- Experience conducting architecture and design-level security reviews.
- Ability to read and understand code across common languages.
- Strong communication skills for influencing engineering teams.
- Preferred: experience with cloud environments, especially Azure.
- Preferred: familiarity with secure SDLC practices and DevSecOps tooling.
- Preferred: experience in regulated environments such as healthcare or finance.
- Preferred: knowledge of AI/ML security risks.
- Preferred: relevant certifications such as CISSP or CSSLP.
- Strong analytical thinking and ability to translate security concerns into practical engineering guidance.
About Truveta
Truveta builds a health provider–led data platform that aggregates and de-identifies EHR data from U.S. health systems for research and clinical insights. It sells subscriptions and evidence-generation tools to life sciences companies, health systems, and researchers to support real-world data and regulatory-grade studies. Founded in 2020 and headquartered in the Seattle area, the company is privately held and backed by participating health systems.