Senior Security Engineer

About the Company

Perceptra is the leading deep health tech startup in Thailand. Our aim is to develop the artificial intelligence platform for the healthcare industry. Currently our first product Inspectra CXR is the best AI software for chest x-ray analysis in the SEA market, with 8 deep learning services deployed on the cloud supporting Radiologists’ workflow through website interface and API services connected directly to hospital’s IT systems. Today, our platform is actively used by 30+ hospitals nationwide. The company also develops high-quality AI services for breast cancer screening, diabetic screening from retinal images, and brain hemorrhage detection with partners such as Siriraj Hospital and Google Health. In another company note we support Radiologists’ workflow in more than 200+ hospitals.

About the Role

As a Senior Security Engineer at Perceptra, you will take a leading role in strengthening the security posture of the infrastructure, platforms, and engineering workflows that power our AI-driven healthcare solutions. You will design and implement practical security controls across cloud and on-premise environments, improve secure software delivery practices, support compliance readiness, and work closely with System Team, DevOps, RD, and product teams to reduce real-world risk without slowing down business-critical operations.

Responsibilities

• Lead and drive internal security engineering initiatives across infrastructure, platform, and software delivery environments, ensuring alignment with business goals and technical standards.
• Design, implement, and continuously improve security controls for cloud (AWS) and on-premise environments, including network boundaries, firewall policy design, network segmentation, access control, secrets handling, workload isolation, and hardening baselines.
• Strengthen Kubernetes and container security by improving image security, runtime protections, workload configurations, service account boundaries, and cluster hardening practices.
• Lead implementation and adoption of DevSecOps practices across development and release pipelines, including SAST, dependency scanning, container scanning, and security gating in CI/CD workflows.
• Own triage, prioritization, and remediation workflows for infrastructure, container, dependency, network, and platform vulnerabilities, including vulnerability assessment scanning programs with focus on critical/high-risk exposures.
• Drive secure-by-design principles across applications and APIs by conducting security architecture reviews, implementing secure API design practices, and performing threat modeling and abuse-
• Improve security monitoring, alerting, logging, and detection coverage across cloud and production systems; support incident response, root cause analysis, evidence collection, and preventive control improvements.
• Translate compliance requirements into technical implementation and evidence, supporting standards and customer expectations related to healthcare and information security (e.g., ISO 27001, ISO 13485, HIPAA, GDPR).
• Contribute security expertise to business continuity planning, backup/recovery design review, disaster recovery readiness, and operational resilience for critical systems.
• Plan, coordinate, and support internal penetration testing and technical security validation activities; translate findings into prioritized remediation actions.
• Work closely with DevOps, RD, product, QA, and management stakeholders to embed security into engineering decisions and mentor junior engineers.

Qualifications / Skills

• Bachelor’s or Master’s degree in Computer Engineering, Computer Science, Cybersecurity, Information Systems, or related technical field.
• 5+ years of hands-on experience in Security Engineering, DevSecOps, Cloud Security, Infrastructure Security, or related roles with ownership of production-grade systems.
• Strong experience securing AWS environments (EC2, S3, IAM, VPC, EKS, RDS, Lambda) including network security, Kubernetes/container security, workload isolation, and Linux system administration and hardening (Ubuntu, CIS benchmarks).
• Experience with observability/monitoring tools and practices (e.g., CloudWatch, Prometheus, Grafana) and improving detection/alerting.
• Solid understanding of API security, secure system design, threat modeling, and secure integration patterns.