Senior/Staff Security Engineer at Sirona Medical

About the Role

We are seeking a Senior/Staff Security Engineer to help protect the infrastructure, applications, and patient data that power RadOS. You’ll work closely with Engineering, IT, and Compliance to design and implement security controls across our cloud environment, support our HIPAA/SOC 2 compliance posture, and build the tooling and processes that let us move fast without compromising the trust our customers place in us. This role reports to the Vice President of Regulatory Affairs and Quality Management and will be a hands-on, individual-contributor role with significant autonomy.

Key Responsibilities:

• Design, implement, and maintain security controls across our cloud infrastructure (AWS) supporting a HIPAA-regulated, SOC 2 audited environment
• Lead and/or support threat modeling, security design reviews, and secure code review for new features and architecture
• Own vulnerability management: identify, triage, and drive remediation of vulnerabilities across cloud and application layers
• Build and maintain logging, monitoring, and alerting (SIEM) to support detection and incident response
• Develop and maintain incident response playbooks; participate in and lead incident response when needed
• Partner with Engineering to embed security into CI/CD pipelines and infrastructure-as-code (Terraform or similar)
• Manage identity and access controls, including least-privilege IAM, SSO/MFA enforcement, and access reviews
• Support compliance initiatives and audits (SOC 2 Type II, HITRUST, HIPAA risk assessments) and own evidence collection and control documentation for your areas
• Evaluate and implement security tooling (CSPM, EDR/XDR, vulnerability scanning) as the environment scales
• Mentor engineers on secure development practices and act as a security point of contact for product and engineering teams

Key Requirements:

• 7+ years of experience in security engineering, infrastructure security, or a closely related role
• Hands-on experience securing cloud environments (AWS preferred; Azure/GCP a plus)
• Experience supporting compliance frameworks such as HIPAA, SOC 2, ISO 27000 series or similar in a regulated environment
• Proficiency with infrastructure-as-code (Terraform or similar) and scripting/automation (Python, Bash, or similar)
• Experience with vulnerability management, SIEM/logging platforms, and incident response
• Working knowledge of identity and access management, Zero Trust principles, and secure network architecture
• Strong communication skills — able to explain risk and trade-offs clearly to both engineers and non-technical stakeholders
• Prior experience in healthcare, health IT, or another highly regulated industry is a plus
• A Computer Science or similar degree is a plus
• Relevant certifications (CISSP, CCSP, OSCP, or similar) are a plus but not required