Sirona Medical - Senior Security Engineer

Remote - USA$145k - $185k+ Equity2d ago

Remote Senior NA Insurance Cloud Computing Security Engineer Recruiter AWS GCP Azure Terraform Bash Python Documentation

Requirements

• 7+ years of experience in security engineering, infrastructure security, or a closely related role • Hands-on experience securing cloud environments (AWS preferred; Azure/GCP a plus) • Experience supporting compliance frameworks such as HIPAA, SOC 2, ISO 27000 series or similar in a regulated environment • Proficiency with infrastructure-as-code (Terraform or similar) and scripting/automation (Python, Bash, or similar) • Experience with vulnerability management, SIEM/logging platforms, and incident response • Working knowledge of identity and access management, Zero Trust principles, and secure network architecture • Strong communication skills — able to explain risk and trade-offs clearly to both engineers and non-technical stakeholders • Prior experience in healthcare, health IT, or another highly regulated industry is a plus • Computer Science or similar degree is a plus • Relevant certifications (CISSP, CCSP, OSCP, or similar) are a plus but not required • Medical, dental, vision insurance • Maternity and Paternity Leave • Apple equipment • Sponsorship for conferences, continuing education, etc • Dynamic engineering role–technological innovation is at the core of our business • Growth and learning opportunities from a startup environment include working closely with an international team of scientists, engineers, platform architects, programmers and professionals • Do something morally benevolent! • The annual US base salary range for this full-time position is $145,000 - $185,000 + equity + benefits. Pay scale is flexible depending on experience. Within the range, individual pay is determined by work location and additional factors, including job-related skills, competencies, experience, relevant education and training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Responsibilities

• Design, implement, and maintain security controls across our cloud infrastructure (AWS) supporting a HIPAA-regulated, SOC 2 audited environment • Lead and/or support threat modeling, security design reviews, and secure code review for new features and architecture • Own vulnerability management: identify, triage, and drive remediation of vulnerabilities across cloud and application layers • Build and maintain logging, monitoring, and alerting (SIEM) to support detection and incident response • Develop and maintain incident response playbooks; participate in and lead incident response when needed • Partner with Engineering to embed security into CI/CD pipelines and infrastructure-as-code (Terraform or similar) • Manage identity and access controls, including least-privilege IAM, SSO/MFA enforcement, and access reviews • Support compliance initiatives and audits (SOC 2 Type II, HITRUST, HIPAA risk assessments) and own evidence collection and control documentation for your areas • Evaluate and implement security tooling (CSPM, EDR/XDR, vulnerability scanning) as the environment scales • Mentor engineers on secure development practices and act as a security point of contact for product and engineering teams

Benefits

• Medical, dental, vision insurance • Maternity and Paternity Leave • Apple equipment • Sponsorship for conferences, continuing education, etc • Dynamic engineering role–technological innovation is at the core of our business • Growth and learning opportunities from a startup environment include working closely with an international team of scientists, engineers, platform architects, programmers and professionals • Do something morally benevolent! • The annual US base salary range for this full-time position is $145,000 - $185,000 + equity + benefits. Pay scale is flexible depending on experience. Within the range, individual pay is determined by work location and additional factors, including job-related skills, competencies, experience, relevant education and training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.