Senior Cybersecurity Engineer

Enovis; Queensland; Presencial; AUD 150.000 - 210.000; Jornada completa

Descripción de la vacante

Enovis Fortitude Valley in Australia is seeking a Senior Cybersecurity Engineer to lead the cybersecurity program for the ASTRA Portal SaMD platform. The role is hands-on, spanning product security, cloud security, application security, vulnerability management, security monitoring, IAM, and regulatory assurance.

You will work with software, cloud/platform engineering, quality and regulatory teams, and external stakeholders to ensure cybersecurity is designed into the product and infrastructure

Formación

• Minimum 6 years of cybersecurity work on cloud-based web applications.
• Experience in medical device or regulated software environments is preferred.
• Familiarity with GRC platforms, cybersecurity risk management and controls.

Responsabilidades

• Own and manage cybersecurity governance, risk and compliance processes.
• Serve as technical cybersecurity contact for customer security assessments.
• Support security across software development lifecycle of the ASTRA Portal.
• Maintain security tooling, monitoring and incident response capabilities.
• Ensure least-privilege IAM across multi-account cloud environments.

Conocimientos

Cybersecurity

Cloud security

Application security

Vulnerability management

Security monitoring

IAM

Herramientas

SIEM

CSPM

Observability stack

Identity and access management

Descripción del empleo

Who We Are

ABOUT ENOVIS™
Enovis Corporation (NYSE: ENOV) is an innovation-driven medical technology growth company dedicated to developing clinically differentiated solutions that generate measurably better patient outcomes and transform workflows. Powered by a culture of continuous improvement, global talent and innovation, the Company's extensive range of products, services and integrated technologies fuels active lifestyles in orthopedics and beyond. For more information about Enovis, please visit www.enovis.com .

What You'll Do
At Enovis™ we pay attention to the details. We embrace collaboration with our partners and patients, and take pride in the pursuit of scientific excellence - with the goal of transforming medical technology as we know it.

Because that's how we change the lives of patients for the better. And that's how we create better together. Why work at Enovis? See for yourself .

As a key member of the Enabling Technologies you will play an integral part in helping Enovis drive the medical technology industry forward through transforming patient care and creating better patient outcomes.

Job Title:

Senior Cybersecurity Engineer

Location:

Fortitude Valley - Australia

Business Unit Description:

Enabling Technologies

We are looking for a Senior Cybersecurity Engineer to lead the cybersecurity program in the Enabling Technologies division. The primary focus will be our cloud-based Software as a Medical Device (SaMD) platform, ASTRA Portal.
The role is hands-on, technically focused and spans product security, cloud security, application security, vulnerability management, security monitoring, identity and access management, cybersecurity risk and regulatory assurance. The system is deployed in multiple countries/regulatory regions.
You will work closely with software engineering, cloud/platform engineering, quality and regulatory teams, and external stakeholders to ensure that cybersecurity is designed into the product and its supporting infrastructure throughout the development and operational lifecycle.
This role is particularly suited to someone who enjoys working across the boundary between cybersecurity engineering, software development, cloud infrastructure and regulated medical-device environments.

Key responsibilities

• Cybersecurity Governance, Risk and Compliance
  • Own and maintain the groups GRC platform and related processes
  • Track cybersecurity findings, corrective actions and remediation through to completion
  • Develop and maintain internal cybersecurity policies, standards and procedures
• Customer Security and Assurance
  • Act as a technical cybersecurity contact for customer and hospital security assessments.
  • Coordinate and complete cybersecurity questionnaires and security assessments received from hospitals, healthcare organisations and other customers.
  • Provide accurate, technically defensible responses regarding application, cloud, infrastructure, data protection, access control, vulnerability management, monitoring and incident response.
  • Maintain a reusable knowledge base of security responses, architecture information and supporting evidence to improve the efficiency and consistency of customer assessments.
• Product and Application Security
  • Work closely with, influence and contribute to security throughout the software development lifecycle of the ASTRA Portal
  • Support application testing and security analysis including SAST, DAST, dependency, container analysis tooling
  • Review cloud and system architectures for security risks and areas of improvement
  • Participate in monitoring, triage and review of system vulnerabilities
• Cloud Cybersecurity
  • Help maintain a consistent security posture across our multiple AWS accounts, environments and geographic regions
  • Assist with the operation of relevant tooling including SIEM, CSPM and the observability stack
  • Review and maintain IAM ensuring least privileges and operational efficiency
• Regulatory, Standards and Policies
  • Stay up to date with the relevant standards and regulations across the different regions ASTRA Portal is deployed in including NIST CSF, GDPR, POPIA, Australian Privacy Principles
  • Operate within a regulated industry under ISO 13485 and IEC 62304
• Security enablement
  • Help embed secure-by-design and secure-by-default principles into engineering practices
  • Provide cybersecurity guidance and technical support to engineering teams
  • Develop security standards, guidance and reusable patterns for engineering teams
  • Promote security-by-design practices throughout the software development lifecycle

Required Experience

• At least 6 year's experience with a proven track record in cybersecurity for a cloud-based web application
• Experience in medical device, healthcare, SaMD or other regulated software environments
• Experience with GRC platforms, cybersecurity risk management and security control frameworks.
• Strong understanding of application security and secure software development practices, including common web application vulnerabilities and sec