> Markdown version of [/jobs/ext/4692136-associate-security-engineer](https://www.wearedevelopers.com/jobs/ext/4692136-associate-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Associate Security Engineer

- **Company:** IBM INDIA PRIVATE LTD
- **Location:** Raleigh, NC, United States
- **Experience:** Starter
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Amazon Web Services, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Computing Security, Data Centers, Linux, DevOps, Disaster Recovery, Identity and Access Management, Network Configuration and Change Management, Network Segmentation, Open Web Application Security, Role-Based Access Control, Runbook, Data Logging, Software Security, Mitre Att&ck, Splunk, Vulnerability Analysis
- **Published:** November 12, 2026
- **Apply:** https://startup.jobs/associate-security-engineer-le9220-veradigm-india-privat-10745111

## About the Role

* Bachelor's Degree or equivalent
 * 0-2 years of relevant job experience

Preferred Experience

 * Linux, Windows, Splunk, Azure, AWS, CI/CD security, and application security principles
 * Understanding of HIPAA healthcare data security

Knowledge, Skills & Abilities

 * Working knowledge of common vulnerability classes (e.g., OWASP Top 10, CWE) and severity/prioritization methods (e.g., CVSS, EPSS, CISA KEV)

 * Understanding of cloud security fundamentals, including identity and access management, least privilege, network segmentation, encryption, and logging

 * Ability to translate technical findings into clear business risk for engineering and executive audiences

 * Ability to manage priorities across multiple product teams and follow findings through to verified closure

 * Clear written communication for tickets, runbooks, technical documentation, and presentations

 * Familiarity with attacker techniques and frameworks such as MITRE ATT&CK

 * Ability to handle protected health information (PHI) and other confidential data with discretion

 * Willingness to learn, seek guidance, and grow into a fully independent PSL

## Description

The primary purpose of this role is to serve as the day-to-day Product Security Liaison (PSL) for one or more assigned Veradigm products, assisting development and operational teams in the appropriate application of security best practices and the use of advanced security technologies.

Working under the guidance of senior PSLs and security leadership, the Associate PSL is the primary security point of contact for assigned product teams. The role triages and tracks remediation of cloud, application, infrastructure, and code-level security findings; helps teams implement future-state security requirements; supports the security exception process; and reports product security posture to engineering and executive leadership.

Serve as the assigned security liaison for one or more products, acting as the primary point of contact between the security organization and product development, DevOps, cloud operations, and hosting teams.

 * Assist development and operational teams in the appropriate application of security best practices and the use of advanced security technologies.

 * Accountable for correctly identifying security vulnerabilities and for building and executing remediation plans with product teams, including the tuning and integration of security tools to reduce false positives.

 * Triage, validate, and route findings from cloud security, vulnerability scanning, application security testing, and bug bounty programs; create and track remediation tickets to closure within defined SLAs.

 * Prepare and present recurring security posture reports for assigned products, summarizing risk, open exceptions, and remediation progress for engineering and executive leadership.

 * Assist product teams in implementing future-state security requirements and maturity initiatives, tracking progress and gathering evidence of completion.

 * Review and provide security input on product architecture, design changes, and cloud/network configuration requests with guidance from senior PSLs.

 * Support the security exception process for assigned products, documenting risk, compensating controls, owners, and expiration dates.

 * Support day-to-day technical controls and escalation events from both security tools and the SOC; investigate alerts assigned to the PSL and coordinate response with product teams.

 * Assist in the implementation of security solutions and ensure the fidelity of alerts/reports to the Security Operations Center.

 * Participate in the definition and documentation of runbooks for SOC and product security processes, including process and procedure documentation.

 * Participate in security reviews and sign-off activities for assigned products, such as disaster recovery/business continuity plans and new builds or releases.

 * Review and participate in benchmarking, installation, upgrade, configuration, deployment, and tuning activity for security solutions used by assigned products.

 * Investigate innovative approaches to improve datacenter, cloud, and application hosting security.

 * Experience in Linux OS administration