{"id":3833971,"url":"https://alion.io/job/arthrex-engineer-ii-product-security","title":"Engineer II- Product Security","company":{"id":12664,"name":"Arthrex","domain":"arthrex.com","url":"https://alion.io/company/arthrex","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":{"grade":"A","score":96,"open_postings":16,"ghost_share":0,"stale_share":0.125,"repost_share":0.063,"time_to_fill_p50_days":24,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Design Controls","optional":false},{"name":"Design History File","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 13485","optional":false},{"name":"ISO 14971","optional":false},{"name":"Kubernetes","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"STRIDE","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Wiz","optional":false}],"status":"live","first_seen_at":"2026-10-09T02:00:00Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-11-07T09:23:44Z","board_verified":true,"closed_at":null,"days_open":30,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":30},"description":"Requisition ID:\n67578 \n\n Title:\nEngineer II- Product Security\n\nSeeking a Engineer II - Product Security (SecOps - Cloud)with an interest in cybersecurity wanting a career that positively impacts people lives!!\nArthrex is a global medical device manufacturer, and our mission is Helping Surgeons Treat Their Patients Better™. As our Engineer II - Product Security (SecOps - Cloud) you will support the security of Arthrex's Engineering software delivery environment by assisting in cloud security monitoring and triage, detection rule maintenance, tooling health, and pipeline and infrastructure security across AWS and Azure. This role works within the Global Product Security Engineering team and is well-suited for a security engineer with a foundation in cloud security and detection engineering who is building depth across the engineering security discipline. The ideal candidate would work from our Naples, FL, Boston, MA, or Santa Barbara, CA locations; however, we are open to full-time remote anywhere in the United States.\nEssential Duties and Responsibilities:\n Cloud Security Monitoring & Detection - Monitor and triage security findings across Arthrex's Engineering environments using CSPM/CNAPP tooling (Wiz), AWS Security Hub, GuardDuty, and Azure Defender for Cloud; assess severity, distinguish true from false positives, and escalate confirmed findings per established procedures. Support the maintenance and tuning of detection rules, alert policies, and thresholds to reduce noise and improve signal fidelity, surfacing coverage gaps and recommending adjustments to senior team members.\nTooling & Log Pipeline Health - Monitor the health of Engineering security tooling and log ingestion pipelines, ensuring log sources are active, complete, and flowing correctly. Verify that cloud security services are properly enabled and configured across all in-scope Engineering accounts and subscriptions; assist in maintaining security dashboards and alerting configurations; escalate coverage gaps or tool degradation as needed.\nIncident Response & Runbook Development - Contribute to the development and upkeep of incident response playbooks and triage runbooks for Engineering security events; participate in incident response activities including triage, containment support, evidence collection, and post-incident documentation.\n Compliance & Reporting - Support Engineering compliance activities related to SOC 2 and HIPAA audit readiness including evidence collection, control documentation, and gap tracking. Contribute to security reporting including finding summaries, remediation tracking, and tool health status for Engineering leadership and compliance stakeholders.\nDesigns security architecture of components or functional systems and modifies existing designs to develop or improve products.\nRecommends alterations to development and design to improve the security of products and/or procedures.\nContributes to a broader design perspective and considers how an application interacts with the underlying infrastructure or external resources.\nConducts structured threat modeling (e.g., STRIDE) to identify potential threats and vulnerabilities, rates associated risks, and designs mitigations. Ensures outputs are documented in DHF and linked to security requirements and ISO14971 risk assessments.\nMaintains security relevant design history file documentation for assigned projects, adhering to Arthrex’s ISO13485 based design control procedures.\nDetermines the necessity of security testing and manages testing of assigned products.\nProvides Regulatory Affairs technical support for assigned projects in support of global product approvals.\nSupports Marketing and Product Management with technical support for training and marketing of assigned products.\nPartners with Software Engineering to design and develop components, processes, and training using Security-by-Design and Privacy-by-Design principles.\nSupports surgeon and distributor customers in the sales process by educating and demonstrating security-focused aspects of assigned products as needed.\nCollaborate with Legal, Compliance (Global Privacy and AI Governance), and IT to ensure products comply with applicable laws, regulations, and company policies.\nReports on progress and status of assigned projects on a timely basis. \nMay be required to travel; International travel may be required.\nKnowledge: \nFrequent use and general knowledge of industry practices, techniques, and standards. General application of concepts and principles.\nSkills:\n Cloud Threat Detection & Visibility (required): Hands-on experience monitoring and investigating security findings and incidents in a cloud environment, including working experience with AWS and/or Azure security services (Security Hub, GuardDuty, Azure Defender for Cloud), CSPM or CNAPP platforms, and security log management including log source validation, ingestion health monitoring, and coverage gap identification across AWS and Azure. Wiz experience is strongly preferred.\n Identity & Access Security (required): Experience with identity federation, lifecycle management, and RBAC using Okta and/or Microsoft Entra ID (SAML/SSO).\n Automation & Scripting (required): Scripting skills in Python, Bash, or PowerShell for automation and tooling.\nExperience with detection engineering fundamentals: alert tuning, false positive analysis, detection rule management, and runbook development preferred.\nExperience with Kubernetes, Argo, and Terraform security best practices preferred.\nAWS Security Specialty or Microsoft Azure Security Engineer (AZ-500) certification preferred.\nKnowledgeable of System and Software Development Processes and Lifecycles required.\nKnowledgeable of application security best practices required.\nEducation and Experience:\n2+ years of related experience required; preferably in cloud security, security operations, or a related security engineering role.\nBachelor degree required preferably in Engineering (Mechanical, Biomedical, Electrical or Software Engineering), Computer Science, Information Security, or Cybersecurity.\nArthrex Benefits\nMedical, Dental and Vision Insurance\nCompany-Provided Life Insurance\nVoluntary Life Insurance\nFlexible Spending Account (FSA)\nSupplemental Insurance Plans (Accident, Cancer, Hospital, Critical Illness)\nMatching 401(k) Retirement Plan\nAnnual Bonus\nWellness Incentive Program\nFree Onsite Medical Clinics\nFree Onsite Lunch\nTuition Reimbursement Program\nTrip of a Lifetime\nPaid Parental Leave\nPaid Time Off\nVolunteer PTO\nEmployee Assistance Provider (EAP)\nAll qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other status protected by law.","description_format":"text","description_chars":6812,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Life insurance","Parental leave","Retirement plans","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Surgical Instruments & Devices","Orthopedic & Spine Implants","Medical Education & Training"],"lifecycle":[{"event":"open","at":"2026-11-05T20:22:16Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 19 · green card filings: 2","filings_12m":19,"filings_prev_12m":27,"green_card_filings_12m":2,"median_offered_wage_usd":167500,"route":null,"cap_exempt":false,"checked_at":"2026-11-07T07:57:00+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":2}],"liveness":{"score":40,"band":"fade","label":"Fading","p_open":1,"p_active":0.734,"p_room":0.55,"age_days":29,"expected_fill_days":24,"reasons":["conf:4","velocity","win:tail","comp:brand"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/arthrex-engineer-ii-product-security","json_url":"https://alion.io/job/arthrex-engineer-ii-product-security.json","meta":{"generated_at":"2026-11-08T04:46:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10335,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":12664},"rest":"https://alion.io/mcp/rest/get_company?id=12664"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Farthrex-engineer-ii-product-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Farthrex-engineer-ii-product-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Farthrex-engineer-ii-product-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/arthrex-engineer-ii-product-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Farthrex-engineer-ii-product-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3833971}},{"tool":"search_jobs","arguments":{"company":"arthrex.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3833971},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}