Senior Security Engineer

Sirona Medical; United States; À distance; USD 145 000 - 185 000; Plein temps

Avantages offerts par ce poste

Stock Options

Flexible PTO

Life insurance

401K matching

Sponsorship for conferences

Résumé du poste

Sirona Medical is seeking a Senior/Staff Security Engineer to protect RadOS infrastructure and data. You will partner with Engineering, IT, and Compliance to implement controls, support HIPAA/SOC 2 compliance, and build tooling for fast, compliant delivery.

You will lead threat modeling, vulnerability management, and CI/CD security integrations, while mentoring teams and maintaining strong risk communication with both technical and non-technical stakeholders.

Qualifications

• : 7+ years of experience in security engineering or related field.
• : Experience supporting HIPAA, SOC 2, ISO 27000 in regulated environments.
• : Proficiency with infrastructure-as-code (Terraform or similar).
• : Scripting and automation skills (Python, Bash).
• : Experience with vulnerability management, SIEM, logging, and incident response.
• : Knowledge of IAM, Zero Trust, secure network architecture.

Responsabilités

• Design, implement, and maintain security controls across cloud infrastructure (AWS).
• Lead threat modeling, security reviews, and secure code reviews for features and architecture.
• Own vulnerability management and remediation across cloud and app layers.
• Build and maintain logging, monitoring, and alerting (SIEM) for detection and response.
• Develop incident response playbooks and lead incidents when needed.
• Embed security into CI/CD pipelines and infrastructure-as-code (Terraform).
• Manage IAM, least-privilege access, SSO/MFA, access reviews.
• Support audits (SOC 2 Type II, HITRUST, HIPAA) and evidence collection.
• Evaluate security tooling (CSPM, EDR/XDR, scanners).
• Mentor engineers on secure development practices.

Connaissances

7+ years experience

HIPAA SOC 2 ISO 27000

Terraform

Python

Bash

Vulnerability management

SIEM/logging platforms

Identity & Access Management

Zero Trust

Security architecture

Excellent communication

Formation

Computer Science or related degree

Outils

Terraform

Description du poste

At Sirona Medical, we're building software that enables physicians to work as fast as they can think.

Each year in the U.S., billions of patient imagesare captured—and nearly all of them are reviewed and diagnosed by radiologists. These specialists are the central hub of diagnostic medicine:over 80% of all healthcare data flows through radiology IT systems. Yet despite their pivotal role, radiologists are overburdened by outdated, fragmented software which limits their efficiency and ultimately the quality and efficiency of care that health systems can provide patients. That's where Sirona comes in.

We're aSan Francisco-based, cloud-native software companywith employees around the world. Our deep understanding of both thepractice and business of radiologyhas allowed us to buildRadOS - a unified, AI-powered operating system powering the entire radiology workflows.

How Sirona Solves the Problem

Sirona isuniquely positioned to transform the way radiology is practiced. We're delivering the organizational shift that both individual radiologists and entire practices urgently need:

Aunified, intuitive, andplatform-agnosticsolution

A streamlined workspace that makesevery part of the radiologist’s workflow faster and easier

The freedom toread from anywhere, for anyone

By cutting clicks, optimizing diagnostic time, and unlocking efficiencies that extendfar beyond the reading room into all care settings, Sirona empowers radiologists—and in doing so, we help the entire healthcare system move faster, smarter, and with greater impact on patient outcomes.

We are seeking a Senior/Staff Security Engineer to help protect the infrastructure, applications, and patient data that power RadOS. You'll work closely with Engineering, IT, and Compliance to design and implement security controls across our cloud environment, support our HIPAA/SOC 2 compliance posture, and build the tooling and processes that let us move fast without compromising the trust our customers place in us. This role reports to the Vice President of Regulatory affairs and Quality Management. and will be a hands-on, individual-contributor role with significant autonomy.

Key Responsibilities:

• Design, implement, and maintain security controls across our cloud infrastructure (AWS) supporting a HIPAA-regulated, SOC 2 audited environment
• Lead and/or support threat modeling, security design reviews, and secure code review for new features and architecture
• Own vulnerability management: identify, triage, and drive remediation of vulnerabilities across cloud and application layers
• Build and maintain logging, monitoring, and alerting (SIEM) to support detection and incident response
• Develop and maintain incident response playbooks; participate in and lead incident response when needed
• Partner with Engineering to embed security into CI/CD pipelines and infrastructure-as-code (Terraform or similar)
• Manage identity and access controls, including least-privilege IAM, SSO/MFA enforcement, and access reviews
• Support compliance initiatives and audits (SOC 2 Type II, HITRUST, HIPAA risk assessments) and own evidence collection and control documentation for your areas
• Evaluate and implement security tooling (CSPM, EDR/XDR, vulnerability scanning) as the environment scales
• Mentor engineers on secure development practices and act as a security point of contact for product and engineering teams

Key Requirements

• 7+ years of experience in security engineering, infrastructure security, or a closely related role
• Experience supporting compliance frameworks such as HIPAA, SOC 2, ISO 27000 series or similar in a regulated environment
• Proficiency with infrastructure-as-code (Terraform or similar) and scripting/automation (Python, Bash, or similar)
• Experience with vulnerability management, SIEM/logging platforms, and incident response
• Working knowledge of identity and access management, Zero Trust principles, and secure network architecture
• Strong communication skills - able to explain risk and trade-offs clearly to both engineers and non-technical stakeholders
• Prior experience in healthcare, health IT, or another highly regulated industry is a plus
• Computer Science or similar degree is a plus
• Relevant certifications (CISSP, CCSP, OSCP, or similar) are a plus but not required
• Stock Options
• Flexible PTO
• Life insurance
• Maternity and Paternity Leave
• 401K matching
• Sponsorship for conferences, continuing education, etc
• Dynamic engineering role-technological innovation is at the core of our business
• Growth and learning opportunities from a startup environment include working closely with an international team of scientists, engineers, platform architects, programmers and professionals
• Do something morally benevolent!

The annual US base salary range for this full-time position is $145,000 - $185,000 + equity + benefits. Pay scale is flexible depending on experience. Within the range, individual pay is determined by work location and additional factors, including job-related skills, competencies, experience, relevant education and training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

We are unable to offer visa sponsorship for this position.