Senior Security Engineer - Cloud & HIPAA Compliance

Sirona Medical; San Francisco (CA); On-site; USD 145,000 - 185,000; Full time

Benefits offered by this job

Stock options

Flexible PTO

Medical/Dental/Vision insurance

Life insurance

Parental leave

401K matching

Apple equipment

Conference sponsorship

Growth opportunities

Job summary

Sirona Medical, a San Francisco-based cloud-native software company, seeks a Senior/Staff Security Engineer to safeguard RadOS infrastructure, applications, and patient data. You will collaborate with Engineering, IT, and Compliance to implement security controls and ensure HIPAA/SOC 2 compliance while enabling rapid delivery.

You will design, implement, and maintain security tooling, IAM, and incident response processes, with hands-on security leadership and mentoring across teams in a

Qualifications

• 7+ years in security engineering or related role.
• Hands-on experience securing cloud environments (AWS preferred).
• Experience with HIPAA, SOC 2, or ISO 27000 in regulated settings.
• Proficiency with Terraform and scripting (Python, Bash).
• Experience with vulnerability management and incident response.
• Strong communication with both technical and non-technical stakeholders.
• Healthcare/health IT experience is a plus.
• Related certifications are a plus but not required.

Responsibilities

• Design, implement, and maintain security controls across AWS cloud infrastructure.
• Lead threat modeling and security design reviews.
• Own vulnerability management across cloud and app layers.
• Build and maintain logging, monitoring, and alerting (SIEM).
• Develop incident response playbooks and lead responses.
• Embed security into CI/CD and infrastructure as code.
• Manage IAM, least-privilege access, SSO/MFA reviews.
• Support compliance audits (HIPAA, SOC 2, ISO 27000) and evidence collection.
• Evaluate security tooling as the environment scales.
• Mentor engineers on secure development practices.

Skills

Cloud security

Threat modeling

Incident response

SIEM

Vulnerability management

IAM / Zero Trust

Automation (Python)

Security architecture

Education

Bachelor's degree in CS

CS degree preferred

Tools

Terraform

Python

Bash

SIEM tooling

AWS

Job description

Sirona Medical, a San Francisco-based cloud-native software company, seeks a Senior/Staff Security Engineer to safeguard RadOS infrastructure, applications, and patient data. You will collaborate with Engineering, IT, and Compliance to implement security controls and ensure HIPAA/SOC 2 compliance while enabling rapid delivery.

You will design, implement, and maintain security tooling, IAM, and incident response processes, with hands-on security leadership and mentoring across teams in a