Senior Security Engineer

Sirona Medical

. Design, implement, and maintain security controls across AWS cloud infrastructure supporting a HIPAA-regulated, SOC 2 audited environment .

Posted 10/26/2026full-timeRemote • California • United StatesSenior💰 $145,000 - $185,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security engineering with a focus on AWS cloud infrastructure, compliance with HIPAA and SOC 2 standards, and vulnerability management. Proficient in incident response, secure coding practices, and embedding security into CI/CD pipelines.

Highest-signal resume keywords

AWS Cloud SecurityVulnerability ManagementIncident ResponseInfrastructure-As-Code (Terraform)Compliance Frameworks (HIPAA, SOC 2)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security EngineeringCloud SecurityVulnerability ManagementIncident ResponseInfrastructure-As-CodeScripting (Python, Bash)Identity And Access ManagementThreat ModelingSecure Code ReviewLogging And Monitoring

Soft Skills

Strong Communication SkillsMentoring

Tools & Technologies

SIEMCSPMEDR/XDRCI/CD PipelinesSSO/MFA

Certifications & Qualifications

CISSPCCSPOSCP

Industry Keywords

HIPAASOC 2HITRUSTHealthcareHealth IT

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformPythonTerraform

About the role

Key responsibilities & impact

Design, implement, and maintain security controls across AWS cloud infrastructure supporting a HIPAA-regulated, SOC 2 audited environment
Lead and/or support threat modeling, security design reviews, and secure code review
Own vulnerability management across cloud and application layers
Build and maintain logging, monitoring, and SIEM alerting for detection and incident response
Develop and maintain incident response playbooks; participate in and lead incident response when needed
Partner with Engineering to embed security into CI/CD pipelines and infrastructure-as-code
Manage identity and access controls, including least-privilege IAM, SSO/MFA enforcement, and access reviews
Support SOC 2 Type II, HITRUST, and HIPAA risk assessment compliance initiatives and audits
Own evidence collection and control documentation
Evaluate and implement CSPM, EDR/XDR, and vulnerability-scanning tools
Mentor engineers on secure development practices and serve as a security point of contact
Collaborate with Engineering, IT, and Compliance; report to the Vice President of Regulatory Affairs and Quality Management

Requirements

What you’ll need

Computer science degree and 7+ years of experience in security engineering, infrastructure security, or a closely related role
Hands-on experience securing cloud environments (AWS preferred; Azure/GCP a plus)
Experience supporting compliance frameworks such as HIPAA, SOC 2, ISO 27000 series or similar in a regulated environment
Proficiency with infrastructure-as-code (Terraform or similar) and scripting/automation (Python, Bash, or similar)
Experience with vulnerability management, SIEM/logging platforms, and incident response
Working knowledge of identity and access management, Zero Trust principles, and secure network architecture
Strong communication skills — able to explain risk and trade-offs clearly to both engineers and non-technical stakeholders
Prior experience in healthcare, health IT, or another highly regulated industry is a plus
Relevant certifications (CISSP, CCSP, OSCP, or similar) are a plus but not required

Benefits

Comp & perks

Stock Options
Flexible PTO
Medical, dental, vision insurance
Life insurance
Maternity and Paternity Leave
401K matching
Apple equipment
Sponsorship for conferences, continuing education, etc
Dynamic engineering role–technological innovation is at the core of our business
Growth and learning opportunities from a startup environment include working closely with an international team of scientists, engineers, platform architects, programmers and professionals
Do something morally benevolent!