Engineer II – Product Security

🕒 September 4

🏄 California, Florida, +1 more states – Remote

🏄 California – Remote 🐊 Florida – Remote 🍂 Massachusetts – Remote

⏰ Full Time

🟢 Junior

🟡 Mid-level

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 35%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Arthrex

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

🏭 Manufacturing

🏥 Healthcare

💊 Pharmaceuticals

Manufacturing • Healthcare • Pharmaceuticals

Arthrex is a global medical device company and leader in new product development and medical education in orthopedics. With a corporate mission of Helping Surgeons Treat Their Patients Better®, Arthrex has pioneered the field of arthroscopy and developed more than 1,000 innovative products and surgical procedures each year to advance minimally invasive orthopedics worldwide. The company is committed to delivering uncompromising quality to healthcare professionals and the millions of patients whose lives they impact.

📋 Description

• Monitor and triage security findings across Arthrex's Engineering environments using CSPM/CNAPP tooling (Wiz), AWS Security Hub, GuardDuty, and Azure Defender for Cloud • Assess severity, distinguish true from false positives, and escalate confirmed findings according to established procedures • Maintain and tune detection rules, alert policies, and thresholds to reduce noise and improve signal fidelity • Identify coverage gaps and recommend adjustments to senior team members • Monitor the health of Engineering security tooling and log ingestion pipelines • Verify that cloud security services are enabled and configured across in-scope Engineering accounts and subscriptions • Maintain security dashboards and alerting configurations • Contribute to incident response playbooks and triage runbooks • Participate in incident response activities including triage, containment support, evidence collection, and post-incident documentation • Support SOC 2 and HIPAA audit readiness through evidence collection, control documentation, and gap tracking • Contribute to security reporting, including finding summaries, remediation tracking, and tool health status • Design security architecture for components or functional systems and modify existing designs to improve product security • Recommend development and design changes to improve product and procedure security • Conduct structured threat modeling, rate risks, and design mitigations; document outputs in DHF and link them to security requirements and ISO14971 risk assessments • Maintain security-related design history file documentation according to ISO13485-based design control procedures • Determine the need for security testing and manage testing of assigned products • Provide Regulatory Affairs technical support for global product approvals • Support Marketing and Product Management with technical training and marketing support • Partner with Software Engineering on Security-by-Design and Privacy-by-Design components, processes, and training • Educate and demonstrate security-focused product aspects to surgeon and distributor customers during the sales process • Collaborate with Legal, Compliance, and IT on applicable laws, regulations, and company policies • Report progress and status of assigned projects in a timely manner

🎯 Requirements

• 2+ years of related experience required; preferably in cloud security, security operations, or a related security engineering role • Bachelor degree required, preferably in Engineering (Mechanical, Biomedical, Electrical or Software Engineering), Computer Science, Information Security, or Cybersecurity • Hands-on experience monitoring and investigating security findings and incidents in a cloud environment • Working experience with AWS and/or Azure security services, including Security Hub, GuardDuty, and Azure Defender for Cloud • Experience with CSPM or CNAPP platforms • Security log management, including log source validation, ingestion health monitoring, and coverage gap identification across AWS and Azure • Experience with identity federation, lifecycle management, and RBAC using Okta and/or Microsoft Entra ID (SAML/SSO) • Scripting skills in Python, Bash, or PowerShell for automation and tooling • Knowledge of system and software development processes and lifecycles • Knowledge of application security best practices • Experience with detection engineering fundamentals preferred, including alert tuning, false positive analysis, detection rule management, and runbook development • Experience with Kubernetes, Argo, and Terraform security best practices preferred • AWS Security Specialty or Microsoft Azure Security Engineer (AZ-500) certification preferred • May be required to travel; international travel may be required

🏖️ Benefits

• Medical, Dental and Vision Insurance • Company-Provided Life Insurance • Voluntary Life Insurance • Flexible Spending Account (FSA) • Supplemental Insurance Plans (Accident, Cancer, Hospital, Critical Illness) • Matching 401(k) Retirement Plan • Annual Bonus • Wellness Incentive Program • Free Onsite Medical Clinics • Free Onsite Lunch • Tuition Reimbursement Program • Trip of a Lifetime • Paid Parental Leave • Paid Time Off • Volunteer PTO • Employee Assistance Provider (EAP)

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume