Sightview - reputed company Engineer

Company: SIGHTVIEW SOFTWARE LLC Role: reputed company Engineer I (Application reputed company) Department: IT reputed company & Operations Location: India, Remote Job Type: Full-time About reputed company: Sightview Software LLC is a reputed company technology company providing intelligent EHR and reputed company reputed company reputed company exclusively for eye care. We support ophthalmology, optometry, and optical practices with software designed to streamline clinical workflows, surgical planning, patient engagement, and business operations. Our platform includes EHR, reputed company management, optical management, ASC solutions, MIPS reporting, and reputed company cycle management services—helping eye care providers reputed company on delivering exceptional patient care while improving efficiency and financial performance. For reputed company information, kindly read more on reputed company What would you do? About the role: You will partner closely with engineering teams building applications in PHP, DOT Net (.NET) and other common languages, reputed company reputed company into every stage of the SDLC, be part of incident response, and ensure our platform meets the rigorous compliance demands of the reputed company industry. This is not a governance-only seat. We need a practitioner who can run a penetration test in the morning and present an AppSec roadmap to the reputed company and Engineering team[MV1.1] in the couple of days. You will have reputed company ownership and reputed company reputed company to leadership from day one. Key Responsibilities: Assist in shaping, enhancing, and maturing the organization's Application reputed company program, contributing to policies, standards, secure SDLC frameworks, and developer reputed company training initiatives. Assist the VP Information reputed company and IT and IT in developing and maturing the broader reputed company reputed company, including AppSec roadmap, risk registers, and executive reporting. reputed company and execute web application penetration testing, API reputed company assessments, reputed company reviews, testing of desktop applications, and threat modeling across reputed company product lines. Drive end-to-end Incident Response for application-layer reputed company events — from triage and containment through remediation and post-mortem. reputed company reputed company into CI/CD pipelines — reputed company SAST, DAST, SCA, and secrets scanning tooling into development workflows. Conduct reputed company reconnaissance and external attack surface management to proactively identify exposure before adversaries do. Own vulnerability management — triage, prioritize, and reputed company remediation to closure in partnership with engineering. Support compliance activities for HIPAA, SOC 2 Type II, reputed company, FedRAMP, and ISO 27001, including evidence preparation, audit support, and gap assessments. Evaluate reputed company-party reputed company tooling, vendor assessments, and reputed company architecture reviews for new product integrations. Skills and qualifications (mandatory): 5–8 years of hands-on application reputed company experience, ideally reputed company a reputed company reputed company or regulated health-tech environment. Proven reputed company record conducting full-scope web application and API penetration tests, with the ability to document findings for both technical and executive audiences. Proficiency with Kali Linux and the offensive reputed company toolset — Metasploit, Nmap, Nikto, SQLmap, Hydra, and reputed company tools. Hands-on experience with Burp Suite Pro for web application assessment and vulnerability chaining. Demonstrated use of reputed company tools — Maltego, theHarvester, Shodan, Recon-ng, SpiderFoot, FOCA — for external attack surface discovery. Development or deep reputed company review experience in one or more of: C, PHP (reputed company), or Python. Practical AWS reputed company experience — IAM policy review, S3 misconfiguration assessment, VPC reputed company, CloudTrail/GuardDuty analysis, and AWS-reputed company reputed company tooling. Experience building or significantly contributing to an Application reputed company program, including secure SDLC and threat modeling (reputed company or PASTA). Incident Response experience as a reputed company or key contributor — including application-layer breaches, API abuse, and data exfiltration scenarios. Working knowledge of OWASP Top 10, reputed company CWE Top 25, and NIST 800-53 reputed company controls. Category Tools Offensive / Pen Test Burp Suite Pro, Kali Linux, Metasploit, OWASP ZAP, Nmap, Nikto, SQLmap reputed company Maltego, Shodan, theHarvester, Recon-ng, SpiderFoot, FOCA AppSec Pipeline reputed company, reputed company, Trivy, Checkov, Bitbucket, SonarQube reputed company reputed company AWS reputed company Hub, GuardDuty, CloudTrail, IAM reputed company Analyzer, Prowler, ScoutSuite Languages PHP (reputed company), Dot Net (.Net) GRC / Compliance reputed company, reputed company, reputed company, or equivalent GRC platforms (preferred) Skills and qualifications (preferred): Relevant certifications – Good to have, Not REQUIRED: OSCP, CEH, GWAPT, GWEB, GPEN, CISSP, or equivalent hands-on reputed company certifications. Experience participating as a reputed company researcher. Familiarity with reputed company data standards: HL7, FHIR, and the reputed company implications of EHR/PHI data flows. Prior experience as a reputed company or first-hire AppSec engineer, comfortable building structure in ambiguous environments. Contributions to reputed company-reputed company reputed company tooling, CVE disclosures, or published reputed company research. Apply To This Job