Senior Security Engineer
Sirona Medical · Remote
About this role
**Senior/Staff Security Engineer — Sirona Medical** **About Sirona Medical** Sirona Medical builds software that enables physicians to work as fast as they can think. Each year in the U.S., billions of patient images are captured and reviewed by radiologists—yet radiology often relies on outdated, fragmented tools. Sirona is a San Francisco-based, cloud-native company building **RadOS**, a unified, AI-powered operating system for end-to-end radiology workflows. **About the Role** Sirona is seeking a **Senior/Staff Security Engineer** to help protect the infrastructure, applications, and patient data that power RadOS. You’ll partner with Engineering, IT, and Compliance to design and implement security controls across the cloud environment, support **HIPAA/SOC 2** compliance, and build tooling and processes that help the team move quickly without compromising customer trust. This is a hands-on, individual-contributor role with significant autonomy. **Key Responsibilities** - Design, implement, and maintain security controls across **AWS** infrastructure in a **HIPAA-regulated, SOC 2 audited** environment - Lead and/or support threat modeling, security design reviews, and secure code reviews - Own vulnerability management: identify, triage, and drive remediation across cloud and application layers - Build and maintain **logging, monitoring, and alerting (SIEM)** for detection and incident response - Develop and maintain incident response playbooks; participate in and lead incidents when needed - Partner with Engineering to embed security into **CI/CD** and **infrastructure-as-code** (Terraform or similar) - Manage identity and access controls (least-privilege IAM, SSO/MFA enforcement, access reviews) - Support compliance initiatives and audits (SOC 2 Type II, HITRUST, HIPAA risk assessments) and own evidence/control documentation for your scope - Evaluate and implement security tooling (CSPM, EDR/XDR, vulnerability scanning) as the environment scales - Mentor engineers on secure development practices and serve as a security point of contact **Key Requirements** - **7+ years** experience in security engineering, infrastructure security, or a closely related role - Hands-on experience securing cloud environments (**AWS preferred**; Azure/GCP a plus) - Experience supporting compliance frameworks such as **HIPAA, SOC 2, ISO 27000 series** (or similar) in regulated environments - Proficiency with **infrastructure-as-code** (Terraform or similar) and scripting/automation (Python, Bash, or similar) - Experience with vulnerability management, SIEM/logging platforms, and incident response - Working knowledge of identity and access management, **Zero Trust**, and secure network architecture - Strong communication skills (explain risk and trade-offs to technical and non-technical stakeholders) - Healthcare/health IT experience is a plus - Computer Science (or similar) degree is a plus - Relevant certifications (CISSP, CCSP, OSCP, or similar) are a plus but not required **Benefits** - Stock Options - Flexible PTO - Medical, dental, vision insurance - Life insurance - Maternity and Paternity Leave - 401K matching - Apple equipment - Sponsorship for conferences and continuing education - Startup environment with strong growth and learning opportunities - Do something morally benevolent! **Compensation** Annual US base salary range: **$145,000 – $185,000 + equity + benefits** (pay scale flexible based on experience and location).
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.