Senior Cybersecurity Engineer (Medical Technology)

Location: Brisbane, Queensland, Australia; Fortitude Valley, Australia

Company

hirify.global is a medical technology company developing clinically differentiated products, services, and integrated technologies for orthopedics and related applications.

What you will do

• Lead cybersecurity for the cloud-based ASTRA Portal Software as a Medical Device platform across multiple countries and regulatory regions.
• Own the GRC platform, cybersecurity policies, standards, procedures, findings, corrective actions, and remediation tracking.
• Coordinate customer and hospital security assessments, questionnaires, technical responses, security evidence, and reusable knowledge resources.
• Embed product and application security into the software development lifecycle, including SAST, DAST, dependency analysis, container analysis, architecture reviews, and vulnerability triage.
• Maintain security across AWS accounts, environments, and regions; support SIEM, CSPM, observability, and IAM operations.
• Provide secure-by-design guidance, standards, patterns, and technical support to software engineering, cloud/platform engineering, quality, regulatory, and external stakeholders.

Requirements

• At least 6 years of cybersecurity experience with a proven track record in cloud-based web applications.
• Experience in medical device, healthcare, Software as a Medical Device, or another regulated software environment.
• Experience with GRC platforms, cybersecurity risk management, and security control frameworks.
• Strong understanding of application security, secure software development, common web application vulnerabilities, and security testing approaches.
• Experience identifying, assessing, prioritizing, and coordinating remediation of security vulnerabilities.
• Strong written and verbal communication skills.
• Solid understanding of cloud security principles and best practices.
• Strong experience with at least one programming language and the ability to understand and review software from a security perspective.

Nice to have

• Experience within the AWS ecosystem.
• Experience with an infrastructure-as-code system.
• Hands-on experience with SIEM and CSPM systems.
• Experience responding to customer or third-party security assessments and questionnaires, particularly in healthcare or enterprise environments.
• Familiarity with ISO 13485, IEC 62304, NIST CSF 2.0, or ISO 27001.
• Knowledge of auditability, traceability, and validation requirements in regulated systems.

Culture & Benefits

• Work in the Enabling Technologies business unit of a medical technology company.
• Collaborate with software engineering, cloud/platform engineering, quality, regulatory teams, customers, hospitals, healthcare organizations, and other external stakeholders.
• Work in a regulated environment governed by ISO 13485 and IEC 62304.
• Contribute to continuous improvement, scientific excellence, and improved patient outcomes.