Senior DevSecOps Engineer – SaMD & Cloud Security

Analog Devices; Wilmington (MA); On-site; USD 135,000 - 202,000; Full time

Benefits offered by this job

Medical coverage

Vision coverage

Dental coverage

401(k)

Paid vacation

Paid holidays

Sick time

Job summary

Analog Devices, Inc. is seeking a highly skilled Staff DevSecOps Engineer for its Health Solutions unit to secure cloud-native platforms for connected medical devices and digital health solutions.

The role focuses on secure SDLC, HIPAA compliance, AWS, CI/CD, and SaMD security, with responsibility for risk assessments, remediation, and FDA-regulated software. Collaborate with engineering teams to implement SBOMs, IAM, encryption, IaC security, and robust auditing to support production readiness

Qualifications

• Experience securing AWS cloud-native applications and platforms.
• Strong knowledge of HIPAA, healthcare data protection, and FDA-regulated software.
• CI/CD pipelines using GitHub Actions or similar.
• SBOM generation and vulnerability remediation.
• Infrastructure as Code security (Terraform, CloudFormation, AWS CDK).
• Container security scanning, SCA, and vulnerability management.
• Solid understanding of authentication, authorization, encryption, and keys management.
• Experience with SBOM generation, dependency management, and remediation.
• Experience with container orchestration and cloud security practices.

Responsibilities

• Implement and maintain security controls across AWS cloud environments for connected medical devices and SaMD.
• Integrate security into CI/CD pipelines and SSDLC processes, including SAST, DAST, SCA, secrets scanning.
• Manage software supply chain security activities and SBOM generation.
• Configure IAM, encryption, key management, and secrets across cloud/app environments.
• Design and maintain audit logging, monitoring, and security controls for HIPAA compliance.
• Collaborate with engineers to identify, prioritize, and remediate vulnerabilities throughout the lifecycle.
• Support risk assessments, penetration testing, vulnerability management, and incident response.
• Build and maintain security automation to improve platform security and efficiency.
• Ensure reliability and operational readiness of cloud-based production systems.

Skills

AWS cloud environments

CI/CD pipelines

Application security

Healthcare software platforms

HIPAA compliance

Cloud security

Security engineering

SBOM generation

Terraform / AWS CDK

Kubernetes / container security

Education

Bachelor's, Master's, or Ph.D. in Cybersecurity/CS/SE/Engineering

Tools

GitHub Actions

SAST/DAST tools

SCA tools

Container security scanning

IaC tooling (Terraform, CloudFormation, AWS CDK)

AWS CloudFormation

Job description

Analog Devices, Inc. is seeking a highly skilled Staff DevSecOps Engineer for its Health Solutions unit to secure cloud-native platforms for connected medical devices and digital health solutions.

The role focuses on secure SDLC, HIPAA compliance, AWS, CI/CD, and SaMD security, with responsibility for risk assessments, remediation, and FDA-regulated software. Collaborate with engineering teams to implement SBOMs, IAM, encryption, IaC security, and robust auditing to support production readiness