Senior DevSecOps Engineer – Medical Devices

About the role

The Health Solutions Business Unit at Analog Devices is looking for a Senior DevSecOps Engineer to build and operate secure cloud‑native platforms for connected medical devices and digital health solutions. You will drive secure software development practices, cloud security controls, and regulatory compliance throughout the product lifecycle.

Key responsibilities

• Implement and maintain security controls across AWS environments supporting SaMD and digital health solutions.
• Integrate security capabilities into CI/CD pipelines, including SAST, DAST, SCA, secrets scanning, container security, and IaC validation.
• Manage software supply‑chain security activities such as SBOM generation, dependency management, and vulnerability remediation.
• Configure identity, access, encryption, key and secrets management across cloud and application layers.
• Design audit logging, monitoring, and controls to meet HIPAA and healthcare data‑protection requirements.

Required profile

• 7+ years of experience in DevSecOps, cloud security, or application security.
• Hands‑on experience securing AWS‑native applications and platforms (ECS, EKS, Lambda, etc.).
• Experience supporting regulated healthcare software (HIPAA, FDA, IEC 62304, ISO 14971).
• Strong analytical, problem‑solving and communication skills.

Required skills

• AWS services: ECS, EKS, Lambda, RDS, S3, SQS, Cognito, IAM, KMS, CloudFormation.
• Infrastructure‑as‑Code: Terraform, CloudFormation, AWS CDK.
• CI/CD: GitHub Actions or similar.
• Security tooling: SAST, DAST, SCA, container security scanning, secrets detection, IaC security scanning, vulnerability management.
• Regulatory knowledge: HIPAA, ISO 27001, SOC 2, FDA cybersecurity guidance.