Senior Cybersecurity Engineer

About the role

Enovis is looking for a Senior Cybersecurity Engineer to lead the cybersecurity program in its Enabling Technologies division, focusing on the cloud-based Software as a Medical Device (SaMD) platform, ASTRA Portal. The role is hands-on and covers product security, cloud security, application security, vulnerability management, security monitoring, identity and access management, cybersecurity risk and regulatory assurance. It suits someone who works across cybersecurity engineering, software development, cloud infrastructure and regulated medical-device environments.

Key responsibilities

• Cybersecurity governance, risk and compliance: own and maintain the group's GRC platform and processes, track findings and remediation, and develop internal policies, standards and procedures
• Customer security and assurance: act as technical cybersecurity contact for customer and hospital assessments, coordinate questionnaires and assessments, and maintain a reusable knowledge base of security responses
• Product and application security: contribute to security throughout the software development lifecycle of ASTRA Portal, support SAST, DAST, dependency and container analysis, and review cloud and system architectures for security risks
• Cloud cybersecurity: help maintain a consistent security posture across multiple AWS accounts and regions, assist with SIEM, CSPM and the observability stack, and maintain IAM with least privilege
• Regulatory and standards: stay current with NIST CSF, GDPR, POPIA, Australian Privacy Principles, and operate within ISO 13485 and IEC 62304
• Security enablement: embed secure-by-design and secure-by-default principles, guide engineering teams, and develop security standards, guidance and reusable patterns

Required profile

• At least 6 years of experience with a proven track record in cybersecurity for cloud-based web applications
• Experience in medical device, healthcare, SaMD or other regulated software environments
• Experience with GRC platforms, cybersecurity risk management and security control frameworks
• Demonstrated experience with vulnerability management and cloud security principles
• Strong written and verbal communication skills

Required skills

• Application security and secure software development practices, including common web vulnerabilities and security testing
• Strong experience with at least one programming language, able to review software from a security perspective
• Desired: AWS ecosystem, infrastructure as code (IaC), SIEM and CSPM, customer security assessment responses, and familiarity with ISO 13485, IEC 62304, NIST CSF 2.0 or ISO 27001