Lead IT Security Engineer

About the role

The Lead Information Security Engineer is a senior cybersecurity leader responsible for protecting the organization’s digital ecosystem across product development, manufacturing, and enterprise IT systems. This role ensures the security of connected medical/surgical devices, intellectual property, and regulated environments, while maintaining compliance with cybersecurity guidance, ISO standards, and global regulations. This position plays a critical role in enabling secure product innovation, patient safety, and operational resilience across the device lifecycle. This REMOTE opportunity is not eligible for employer-visa sponsorship.

Responsibilities

• Security Operations & Incident Response: Lead detection and response for incidents affecting manufacturing systems (OT/ICS), connected medical/surgical devices, and enterprise IT environments; Manage SOC operations with prioritization of IT security, production integrity, and supply chain impact; Investigate and respond to incidents involving intellectual property theft, disruptions and/or ransomware affecting production lines, and IT vulnerabilities; Lead regulatory-aligned incident handling and disclosure (local/global authorities)
• Production & IT Security (Critical Focus Area): Partner with IT, production, and engineering to embed secure-by-design principles across the IT & product lifecycle; Conduct threat modeling and security risk assessments for surgical and medical devices; Support compliance with IT security guidance, SOX, ISO27001 & EU GDPR / NIS2; Identify and remediate product vulnerabilities (secure firmware, APIs, connectivity); Support coordinated vulnerability disclosure (CVD) processes
• Manufacturing & Operational Technology (OT) Security: Secure manufacturing environments (plants, production lines, robotics, control systems); Implement segmentation between IT and OT networks; Lead vulnerability and patch management for industrial control systems; Reduce risk to production continuity and product integrity
• Threat & Vulnerability Management: Monitor threat landscape with emphasis on nation-state attacks targeting IP, supply chain compromise, medical device exploitation; Lead proactive threat hunting across cloud environments, OT/manufacturing systems, & product telemetry (if applicable); Drive enterprise-wide vulnerability management with prioritization