Senior DevSecOps Engineer - Healthcare Cloud Security

Analog Devices; Wilmington (MA); On-site; USD 140,000 - 210,000; Full time

Job summary

Analog Devices, Inc. is seeking a Staff DevSecOps Engineer to secure cloud-native platforms for connected medical devices and digital health solutions.

You will implement SSDLC, enforce HIPAA and FDA-regulated requirements, manage SBOMs, container security, IAM, encryption, and cloud-native security across AWS environments.

Collaborate with software engineering teams to remediate vulnerabilities, automate security controls, and support production readiness.

Qualifications

• 7+ years of experience in DevSecOps, Cloud Security, Security Engineering, Application Security, or related technical roles.

Responsibilities

• Implement and maintain security controls across AWS environments supporting connected medical devices, SaMD, and digital health solutions.
• Integrate and manage security capabilities within CI/CD pipelines and SSDLC processes, including secure coding practices, SAST, DAST, SCA, secrets scanning, container security scanning, and Infrastructure-as-Code security validation.
• Manage software supply chain security activities, including SBOM generation, dependency management, artifact integrity validation, and vulnerability remediation.
• Configure and maintain identity and access management, authentication, authorization, encryption, key management, and secrets management solutions across cloud and application environments.
• Design and maintain audit logging, monitoring, and security controls supporting HIPAA compliance and healthcare data protection requirements.
• Partner with software engineering teams to identify, prioritize, and remediate security vulnerabilities throughout the product lifecycle.
• Support security risk assessments, penetration testing activities, vulnerability management, incident response, and operational security efforts.
• Build and maintain security automation capabilities to improve platform security, compliance, and operational efficiency.
• Support the reliability, availability, monitoring, and operational readiness of cloud-based production systems.

Skills

DevSecOps

Cloud security

Security engineering

Application security

HIPAA compliance

Regulatory compliance

Education

Bachelor's degree in Cybersecurity

Master's degree in Computer Science

PhD in Information Security

Tools

AWS ECS

AWS EKS

AWS Lambda

AWS RDS

AWS S3

AWS SQS

AWS Cognito

AWS IAM

AWS KMS

CloudFormation

Terraform

AWS CDK

GitHub Actions

SAST

DAST

SCA

Container security scanning

Job description

Analog Devices, Inc. is seeking a Staff DevSecOps Engineer to secure cloud-native platforms for connected medical devices and digital health solutions.

You will implement SSDLC, enforce HIPAA and FDA-regulated requirements, manage SBOMs, container security, IAM, encryption, and cloud-native security across AWS environments.

Collaborate with software engineering teams to remediate vulnerabilities, automate security controls, and support production readiness.