Lead IT Security Engineer

The Lead Information Security Engineer is a senior cybersecurity leader responsible for protecting the organization’s digital ecosystem across product development, manufacturing, and enterprise IT systems. This role ensures the security of connected medical/surgical devices, intellectual property, and regulated environments, while maintaining compliance with cybersecurity guidance, ISO standards, and global regulations.

This position plays a critical role in enabling secure product innovation, patient safety, and operational resilience across the device lifecycle.

**This REMOTE opportunity is not eligible for employer-visa sponsorship **

Key Responsibilities

Security Operations & Incident Response

• Lead detection and response for incidents affecting: manufacturing systems (OT/ICS), connected medical/surgical devices, and enterprise IT environments
• Manage SOC operations with prioritization of IT security, production integrity, and supply chain impact
• Investigate and respond to incidents involving intellectual property theft, disruptions and/or ransomware affecting production lines, and IT vulnerabilities
• Lead regulatory-aligned incident handling and disclosure (local/global authorities)

Production & IT Security (Critical Focus Area)

• Partner with IT, production, and engineering to embed secure-by-design principles across the IT & product lifecycle
• Conduct threat modeling and security risk assessments for surgical and medical devices
• Support compliance with IT security guidance, SOX, ISO27001 & EU GDPR / NIS2
• Identify and remediate product vulnerabilities (secure firmware, APIs, connectivity)
• Support coordinated vulnerability disclosure (CVD) processes

Manufacturing & Operational Technology (OT) Security

• Secure manufacturing environments (plants, production lines, robotics, control systems)
• Implement segmentation between IT and OT networks
• Lead vulnerability and patch management for industrial c