Senior DevSecOps Engineer– Medical Devices
Analog Devices2 months ago
Istanbul, TurkeySenior
Responsibilities
- Implement and maintain security controls across AWS environments supporting connected medical devices, Software as a Medical Device, and digital health solutions.
- Integrate and manage security capabilities within CI/CD pipelines and secure software development lifecycle processes.
- Manage software supply chain security, including SBOM generation, dependency management, artifact integrity validation, and vulnerability remediation.
- Configure identity and access management, authentication, authorization, encryption, key management, and secrets management solutions.
- Maintain audit logging, monitoring, HIPAA compliance controls, and healthcare data protection measures.
- Partner with software engineering teams to identify, prioritize, and remediate vulnerabilities.
- Support security risk assessments, penetration testing, vulnerability management, incident response, and operational security.
- Build security automation to improve platform security, compliance, and operational efficiency.
- Support reliability, availability, monitoring, and operational readiness of cloud production systems.
Requirements
- Bachelor's, master's, or Ph.D. degree in cybersecurity, computer science, software engineering, computer engineering, information security, or a related technical discipline.
- At least 7 years of experience in DevSecOps, cloud security, security engineering, application security, or related technical roles.
- Experience supporting healthcare products, medical devices, or digital health software within quality and compliance frameworks.
- Strong experience securing cloud-native applications and platforms on AWS.
- Hands-on experience with AWS services including ECS, EKS, Lambda, RDS, S3, SQS, Cognito, IAM, KMS, and CloudFormation.
- Experience implementing CI/CD pipelines using GitHub Actions or similar platforms.
- Experience with SAST, DAST, SCA, container security scanning, secrets detection, infrastructure-as-code security scanning, and vulnerability management tools.
- Strong understanding of application security, secure coding, authentication, authorization, encryption, secrets management, and key management.
- Experience with software supply chain security, SBOM generation, dependency management, artifact signing, and vulnerability remediation.
- Experience with infrastructure-as-code technologies such as Terraform, CloudFormation, or AWS CDK.
- Understanding of OWASP guidance, cloud security best practices, and secure software development methodologies.
- Experience with containerized applications and orchestration platforms such as ECS, EKS, or Kubernetes.
- Experience implementing and supporting HIPAA-compliant cloud environments and healthcare data protection controls.
- Experience supporting security and compliance programs aligned with ISO 27001, SOC 2, or similar standards.
- Desired qualifications include experience with FDA-regulated products, IEC 62304, ISO 14971, FDA Cybersecurity Guidance, AI-enabled healthcare platforms, and professional certifications such as CISSP, CSSLP, AWS Security Specialty, Security+, or CKS.
Benefits
- Required travel is 10% of the time.
- The position is a 1st Shift/Days role.
- Applicants who require technical-data access may be subject to U.S. export licensing review, except for U.S. citizens, permanent residents, and protected individuals.
Tech Stack
Categories
About Analog Devices
Analog Devices, Inc. designs and sells analog, mixed-signal, RF, power, sensor, and digital signal processing ICs to OEMs across industrial, automotive, communications, consumer, and healthcare markets. Founded in 1965 and headquartered in Wilmington, Massachusetts, the NASDAQ-listed company earns revenue from catalog and application-specific semiconductors and supporting software used in applications from factory automation and vehicles to data centers and medical devices.