About Sirona Medical

At Sirona Medical, we’re building software that enables physicians to work as fast as they can think.

Each year in the U.S., billions of patient images are captured—and nearly all of them are reviewed and diagnosed by radiologists. These specialists are the central hub of diagnostic medicine: over 80% of all healthcare data flows through radiology IT systems. Yet despite their pivotal role, radiologists are overburdened by outdated, fragmented software which limits their efficiency and ultimately the quality and efficiency of care that health systems can provide patients. That’s where Sirona comes in.

We’re a San Francisco-based, cloud-native software company with employees around the world. Our deep understanding of both the practice and business of radiology has allowed us to build RadOS—a unified, AI-powered operating system powering the entire radiology workflows.

How Sirona Solves the Problem

Sirona is uniquely positioned to transform the way radiology is practiced. We're delivering the organizational shift that both individual radiologists and entire practices urgently need:

A unified, intuitive, and platform-agnostic solution

A streamlined workspace that makes every part of the radiologist’s workflow faster and easier

The freedom to read from anywhere, for anyone

By cutting clicks, optimizing diagnostic time, and unlocking efficiencies that extend far beyond the reading room into all care settings, Sirona empowers radiologists—and in doing so, we help the entire healthcare system move faster, smarter, and with greater impact on patient outcomes.

For more information, please visit https://sironamedical.com/join/.

About the Role

We are seeking a Senior/Staff Security Engineer to help protect the infrastructure, applications, and patient data that power RadOS. You'll work closely with Engineering, IT, and Compliance to design and implement security controls across our cloud environment, support our HIPAA/SOC 2 compliance posture, and build the tooling and processes that let us move fast without compromising the trust our customers place in us. This role reports to the Vice President of Regulatory affairs and Quality Management. and will be a hands-on, individual-contributor role with significant autonomy.

Key Responsibilities

Design, implement, and maintain security controls across our cloud infrastructure (AWS) supporting a HIPAA-regulated, SOC 2 audited environment
Lead and/or support threat modeling, security design reviews, and secure code review for new features and architecture
Own vulnerability management: identify, triage, and drive remediation of vulnerabilities across cloud and application layers
Build and maintain logging, monitoring, and alerting (SIEM) to support detection and incident response
Develop and maintain incident response playbooks; participate in and lead incident response when needed
Partner with Engineering to embed security into CI/CD pipelines and infrastructure-as-code (Terraform or similar)
Manage identity and access controls, including least-privilege IAM, SSO/MFA enforcement, and access reviews
Support compliance initiatives and audits (SOC 2 Type II, HITRUST, HIPAA risk assessments) and own evidence collection and control documentation for your areas
Evaluate and implement security tooling (CSPM, EDR/XDR, vulnerability scanning) as the environment scales
Mentor engineers on secure development practices and act as a security point of contact for product and engineering teams

Key Requirements

7+ years of experience in security engineering, infrastructure security, or a closely related role
Hands-on experience securing cloud environments (AWS preferred; Azure/GCP a plus)
Experience supporting compliance frameworks such as HIPAA, SOC 2, ISO 27000 series or similar in a regulated environment
Proficiency with infrastructure-as-code (Terraform or similar) and scripting/automation (Python, Bash, or similar)
Experience with vulnerability management, SIEM/logging platforms, and incident response
Working knowledge of identity and access management, Zero Trust principles, and secure network architecture