Senior DevSecOps Engineer – Medical Devices Cloud Security

Analog Devices, Inc.; Wilmington (MA); On-site; USD 135,000 - 202,000; Full time

Benefits offered by this job

Medical coverage

401k

Paid vacation

Holidays and sick time

Job summary

Analog Devices, Inc. in the Health Solutions unit is seeking a hands-on Staff DevSecOps Engineer to secure cloud-native platforms for connected medical devices and digital health solutions.

You will implement SSDLC, cloud security controls, SBOM generation, HIPAA and FDA compliance, and collaborate with software teams to remediate vulnerabilities from development through post-market operations.

Qualifications

• 7+ years of experience in DevSecOps, Cloud Security, Security Engineering, or related roles.
• Experience with healthcare software, medical devices, or digital health within quality/compliance frameworks.
• Strong AWS expertise and security tooling knowledge.

Responsibilities

• Implement and maintain security controls across AWS cloud environments for connected medical devices and SaMD.
• Integrate security capabilities within CI/CD pipelines and SSDLC processes (SAST, DAST, SCA, secrets scanning).
• Manage software supply chain security, SBOM generation, dependency management, and vulnerability remediation.
• Configure IAM, encryption, key management, and secrets management across environments.
• Support HIPAA compliance, healthcare data protection, and regulatory requirements across the product lifecycle.

Skills

DevSecOps

Cloud security

Regulatory compliance

Healthcare software

Security automation

Vulnerability management

Threat modelling

Education

Bachelor's degree in Cybersecurity

Master's degree in Computer Science

PhD in Information Security

Tools

AWS

GitHub Actions

SAST

DAST

SCA

Terraform

CloudFormation

Kubernetes

AWS CDK

Job description

Analog Devices, Inc. in the Health Solutions unit is seeking a hands-on Staff DevSecOps Engineer to secure cloud-native platforms for connected medical devices and digital health solutions.

You will implement SSDLC, cloud security controls, SBOM generation, HIPAA and FDA compliance, and collaborate with software teams to remediate vulnerabilities from development through post-market operations.