Senior Cloud Security Engineer, Healthcare Platform

2300 Analog Devices Turkey Mikroelektronik Tasarım ve Gelistirme Limited Sirketi; Dilovası; On-site; TRY 350,000 - 550,000; Full time

Job summary

Analog Devices is seeking a Senior Cloud Security Engineer for Healthcare Platform to secure cloud-native health solutions, including SaMD. You will implement secure software development practices, manage cloud security controls in AWS, and ensure HIPAA compliance across the product lifecycle.

The ideal candidate has 5+ years in DevSecOps, strong AWS experience, and expertise in SDLC security. The role emphasizes automation, regulatory alignment, and collaboration with software teams.

Qualifications

• Bachelor's, Master's, or Ph.D. in Cybersecurity, CS, Software/Computer Engineering, Information Security, or related field.
• 5+ years of experience in DevSecOps, Cloud Security, Security Engineering, or related roles.
• Experience building security for healthcare software/products and FDA-regulated environments.
• Strong experience securing AWS-based cloud-native apps and platforms.

Responsibilities

• Implement and maintain security controls across AWS cloud environments supporting healthcare platforms and SaMD.
• Integrate security capabilities within CI/CD pipelines and SSDLC processes (SAST, DAST, SCA, secrets scanning).
• Manage software supply chain security, SBOM generation, dependency management, and vulnerability remediation.
• Configure IAM, encryption, key management, and secrets management across cloud/app environments.
• Design audit logging, monitoring, and HIPAA/compliance-focused controls.
• Collaborate with engineering teams to remediate vulnerabilities across the product lifecycle.
• Support risk assessments, penetration testing, and incident response.
• Develop security automation to improve platform security and operations.

Skills

Cloud security

DevSecOps

Secure SDLC

HIPAA compliance

AWS expertise

CI/CD

SAST/DAST/SSAI

Education

Bachelor's/Master's/PhD in Cybersecurity/CS/SE/IS

Tools

AWS (ECS, EKS, Lambda, RDS, S3)

Terraform

CloudFormation

GitHub Actions

Job description

About Analog Devices Analog Devices, Inc. (NASDAQ: ADI) is a global semiconductor leader that bridges the physical and digital worlds to enable breakthroughs at the Intelligent Edge. ADI combines analog, digital, AI, and software technologies into solutions that combat climate change, reliably connect humans and the world, and help drive advancements in automation and robotics, mobility, healthcare, energy and data centers. With revenue of more than $11 billion in FY25, ADI ensures today's innovators stay Ahead of What's Possible. Learn more at www.analog.com and on LinkedIn and X.

Job Description Senior Cloud Security Engineer, Healthcare Platform The Health Solutions Business Unit at Analog Devices is seeking a Cloud Security Engineer to support the development and operation of secure cloud-native platforms for connected medical devices and digital health solutions. The successful candidate will contribute to the implementation of secure software development practices, cloud security controls, software supply chain security, and regulatory compliance activities throughout the product lifecycle. This role requires strong experience with AWS cloud environments, CI/CD pipelines, application security, and healthcare software platforms, along with deep expertise in HIPAA compliance, healthcare data protection, cloud security, and cybersecurity requirements for FDA-regulated medical devices. The ideal candidate is a hands‑on engineer with experience securing modern cloud applications, automating security processes, and supporting regulated software products from development through deployment and post‑market operations.

Key Responsibilities

• Implement and maintain security controls across AWS cloud environments supporting connected medical devices, Software as a Medical Device (SaMD), and digital health solutions.
• Integrate and manage security capabilities within CI/CD pipelines and Secure Software Development Lifecycle (SSDLC) processes, including secure coding practices, SAST, DAST, SCA, secrets scanning, container security scanning, and Infrastructure-as-Code security validation.
• Manage software supply chain security activities, including SBOM generation, dependency management, artifact integrity validation, and vulnerability remediation.
• Configure and maintain identity and access management, authentication, authorization, encryption, key management, and secrets management solutions across cloud and application environments.
• Design and maintain audit logging, monitoring, and security controls supporting HIPAA compliance and healthcare data protection requirements.
• Partner with software engineering teams to identify, prioritize, and remediate security vulnerabilities throughout the product lifecycle.
• Support security risk assessments, penetration testing activities, vulnerability management, incident response, and operational security efforts.
• Build and maintain security automation capabilities to improve platform security, compliance, and operational efficiency.
• Support the reliability, availability, monitoring, and operational readiness of cloud-based production systems.

Requirements

• Bachelor's, Master's, or Ph.D. degree in Cybersecurity, Computer Science, Software Engineering, Computer Engineering, Information Security, or a related technical discipline.
• 5+ years of experience in DevSecOps, Cloud Security, Security Engineering, Application Security, or related technical roles.
• Experience supporting software development for healthcare products, medical devices, or digital health solutions within established quality and compliance frameworks.
• Strong experience securing cloud-native applications and platforms running on AWS.
• Hands‑on experience with AWS services such as ECS, EKS, Lambda, RDS, S3, SQS, Cognito, IAM, KMS, CloudFormation, and related cloud technologies.
• Experience implementing and managing CI/CD pipelines using GitHub Actions or similar platforms.
• Experience with security tooling including SAST, DAST, SCA, container security scanning, secrets detection, Infrastructure-as-Code security scanning, and vulnerability management solutions.
• Strong understanding of application security principles, secure coding practices, authentication, authorization, encryption, secrets management, and key management.
• Experience with software supply chain security concepts, including SBOM generation, dependency management, artifact signing, and vulnerability remediation.
• Experience with Infrastructure as Code technologies such as Terraform, CloudFormation, or AWS CDK.
• Strong understanding of OWASP guidance, cloud security best practices, and secure software development methodologies.
• Experience with containerized applications and orchestration platforms such as ECS, EKS, Kubernetes, or similar technologies.
• Experience implementing and supporting HIPAA‑compliant cloud environments and healthcare data protection controls.
• Experience supporting security and compliance programs aligned with frameworks such as ISO 27001, SOC 2, or similar industry standards.
• Strong analytical, problem‑solving, communication, and collaboration skills.

Additional Desired Skills and Qualifications

• Experience supporting FDA-regulated products and familiarity with IEC 62304, ISO 14971, FDA Cybersecurity Guidance and related healthcare software development standards.
• Experience supporting cloud platforms that enable AI-powered or AI-assisted healthcare solutions.
• Proven track record of successfully delivering secure cloud-based software products and improving security posture through automation and DevSecOps practices.
• Professional certifications such as CISSP, CSSLP, AWS Security Specialty, Security+, Certified Kubernetes Security Specialist (CKS), or equivalent.

For positions requiring access to technical data, Analog Devices, Inc. may have to obtain export licensing approval from the U.S. Department of Commerce - Bureau of Industry and Security and/or the U.S. Department of State - Directorate of Defense Trade Controls. As such, applicants for this position – except US Citizens, US Permanent Residents, and protected individuals as defined by 8 U.S.C. 1324b(a)(3) – may have to go through an export licensing review process.

Analog Devices is an equal opportunity employer. We foster a culture where everyone has an opportunity to succeed regardless of their race, color, religion, age, ancestry, national origin, social or ethnic origin, sex, sexual orientation, gender, gender identity, gender expression, marital status, pregnancy, parental status, disability, medical condition, genetic information, military or veteran status, union membership, and political affiliation, or any other legally protected group.

Job Req Type: Experienced Required Travel: Yes, 10% of the time Shift Type: 1st Shift/Days

Analog Devices, Inc. (NASDAQ: ADI) is a global semiconductor leader that bridges the physical and digital worlds to enable breakthroughs at the Intelligent Edge. ADI combines analog, digital, AI, and software technologies into solutions that combat climate change, reliably connect humans and the world, and help drive advancements in automation and robotics, mobility, healthcare, energy and data centers. With revenue of more than $11 billion in FY25, ADI ensures today's innovators stay Ahead of What's Possible. Learn more at www.analog.com and on LinkedIn and X. Come join ADI – a place where Innovation meets Impact. For more than 55 years, Analog Devices has been inventing new breakthrough technologies that transform lives. At ADI you will work alongside the brightest minds to collaborate on solving complex problems that matter from autonomous vehicles, drones and factories to augmented reality and remote healthcare. ADI fosters a culture that focuses on employees through beneficial programs, aligned goals, continuous learning opportunities, and practices that create a more sustainable future.