Senior Cybersecurity Engineer

Enovis Surgical; Brisbane; On-site; AUD 150,000 - 210,000; Full time

Job summary

Enovis Corporation in Australia is seeking a Senior Cybersecurity Engineer to lead the cybersecurity program for the ASTRA Portal SaMD platform. The role is hands-on across product security, cloud security and regulatory assurance.

You will collaborate with software, cloud, quality and regulatory teams to embed secure-by-design practices, manage GRC, respond to customer assessments and drive a robust security posture across AWS environments.

Qualifications

• At least 6 years of cybersecurity experience in a cloud-based web application.
• Experience in medical device, healthcare, SaMD, or other regulated software environments.
• Experience with GRC platforms, cybersecurity risk management and security control frameworks.
• Strong understanding of application security and secure software development practices.
• Demonstrated experience with vulnerability management and remediation coordination.
• Strong written and verbal communication skills.
• Solid understanding of cloud security principles and best practices.
• Experience with at least one programming language from a security perspective.

Responsibilities

• Own and maintain the group’s GRC platform and related processes.
• Track cybersecurity findings, corrective actions and remediation.
• Develop and maintain internal cybersecurity policies, standards and procedures.
• Act as technical cybersecurity contact for customer security assessments.
• Coordinate and complete security questionnaires from hospitals and customers.
• Provide accurate responses on application, cloud, infrastructure and data protection security.
• Maintain a reusable knowledge base for customer assessments.
• Work with engineering to embed security across the software lifecycle.
• Support security testing tooling (SAST, DAST, dependency checks).
• Review architectures for security risks and improvements.
• Monitor vulnerabilities across AWS accounts and environments.
• Operate SIEM, CSPM and observability tooling.
• Review IAM for least privilege and efficiency.
• Stay updated on standards like NIST CSF, GDPR, ISO 13485, IEC 62304.

Skills

Cybersecurity

Cloud security

Application security

GRC

Vulnerability management

IAM

Security monitoring

Regulatory affairs

Communication

Tools

SIEM

CSPM

Container analysis

SAST/DAST

IaC tooling

AWS

Job description

Enovis Corporation (NYSE: ENOV) is an innovation-driven medical technology company dedicated to creating a future of better care. We embrace collaboration with our partners and patients and take pride in the pursuit of scientific excellence - with the goal of transforming medical technology as we know it. Because that's how we change the lives of patients for the better. And that's how we create better together.

We are looking for a Senior Cybersecurity Engineer to lead the cybersecurity program in the Enabling Technologies division. The primary focus will be our cloud-based Software as a Medical Device (SaMD) platform, ASTRA Portal.

The role is hands-on, technically focused and spans product security, cloud security, application security, vulnerability management, security monitoring, identity and access management, cybersecurity risk and regulatory assurance. The system is deployed in multiple countries/regulatory regions.

You will work closely with software engineering, cloud/platform engineering, quality and regulatory teams, and external stakeholders to ensure that cybersecurity is designed into the product and its supporting infrastructure throughout the development and operational lifecycle.

This role is particularly suited to someone who enjoys working across the boundary between cybersecurity engineering, software development, cloud infrastructure and regulated medical-device environments.

Key responsibilities

Cybersecurity Governance, Risk and Compliance

Own and maintain the groups GRC platform and related processes

Track cybersecurity findings, corrective actions and remediation through to completion

Develop and maintain internal cybersecurity policies, standards and procedures

Customer Security and Assurance

Act as a technical cybersecurity contact for customer and hospital security assessments.

Coordinate and complete cybersecurity questionnaires and security assessments received from hospitals, healthcare organisations and other customers.

Provide accurate, technically defensible responses regarding application, cloud, infrastructure, data protection, access control, vulnerability management, monitoring and incident response.

Maintain a reusable knowledge base of security responses, architecture information and supporting evidence to improve the efficiency and consistency of customer assessments.

Product and Application Security

Work closely with, influence and contribute to security throughout the software development lifecycle of the ASTRA Portal

Support application testing and security analysis including SAST, DAST, dependency, container analysis tooling

Review cloud and system architectures for security risks and areas of improvement

Participate in monitoring, triage and review of system vulnerabilities

Help maintain a consistent security posture across our multiple AWS accounts, environments and geographic regions

Assist with the operation of relevant tooling including SIEM, CSPM and the observability stack

Review and maintain IAM ensuring least privileges and operational efficiency

Regulatory, Standards and Policies

Stay up to date with the relevant standards and regulations across the different regions ASTRA Portal is deployed in including NIST CSF, GDPR, POPIA, Australian Privacy Principles

Operate within a regulated industry under ISO 13485 and IEC 62304

Security enablement

Help embed secure-by-design and secure-by-default principles into engineering practices

Provide cybersecurity guidance and technical support to engineering teams

Develop security standards, guidance and reusable patterns for engineering teams

Promote security-by-design practices throughout the software development lifecycle

Required Experience

At least 6 year's experience with a proven track record in cybersecurity for a cloud-based web application

Experience in medical device, healthcare, SaMD or other regulated software environments

Experience with GRC platforms, cybersecurity risk management and security control frameworks.

Strong understanding of application security and secure software development practices, including common web application vulnerabilities and security testing approaches

Demonstrated experience with vulnerability management, including identifying, assessing, prioritising and coordinating remediation of security vulnerabilities

Strong written and verbal communication skills

Solid understanding of cloud security principles and best practices

Strong experience with at least one programming language, with the ability to understand and review software from a security perspective

Desired Experience

Prior experience within the AWS ecosystem

Experience with an infrastructure as code (IaC) system

Hands on experience with SIEM and CSPM systems

Experience responding to customer or third-party security assessments and security questionnaires, particularly within healthcare or enterprise environments

Familiarity with standards such as ISO 13485, IEC 62304, NIST CSF 2.0 or ISO 27001

Knowledge of auditability, traceability, and validation requirements in regulated systems

At Enovis, we're focused on Creating Better Together!
We're proud to share that Enovis Healthcare Solutions has been recognized as a winner in the 2026 TAG Awards for MedTech, an industry program produced by The Aebli Group. This year's awards celebrate organizations that are pushing the boundaries of innovation across MedTech, Life Sciences, and BioTech - turning bold ideas into real-world impact.

We embrace diversity, equity, and inclusion and are committed to creating a respectful and inclusive workplace where everyone belongs.