Sr DevSecOps Engineer
Core
Define, implement, and govern secure embedded software platform practices for regulated medical device programs, leading CI/CD automation, embedded Linux security, and software supply chain controls.
Role type
Senior IC DevSecOps Engineer (Embedded Systems)
Builds
Secure embedded platform software, build infrastructure, reusable automation capabilities, and compliant release evidence for medical devices.
Domain
Healthcare technology / Embedded Linux / Cybersecurity
Deliverable
production ML models | product features | infrastructure
Required skills
Yocto-based embedded Linux development, CI/CD pipeline architecture, embedded Linux security, software supply chain management (SBOM, SOUP/OTS), threat modeling, CVE triage, secure boot and firmware signing, Python, Bash, Go, static analysis, software composition analysis.
Preferred skills
FDA cybersecurity expectations, IEC 62304, ISO 14971, ISO 13485, AMD/Xilinx SoC experience, real-time OS (SafeRTOS, QNX), regulated environment experience, cross-functional leadership.
Technologies
AMD Zynq, Zynq UltraScale+, NVIDIA ORIN, SafeRTOS, FreeRTOS, Yocto, Docker, Snyk, SonarQube, Bitbucket, Jira, Bamboo, Confluence, GitHub, GitLab.
Responsibilities
Define DevSecOps architecture and roadmap; develop secure embedded platform software and build infrastructure; establish secure software supply chain practices; lead threat modeling and cybersecurity risk analysis; drive CVE intake and remediation; design secure boot and update mechanisms; support regulatory submissions and audits; provide technical leadership and mentoring.
Seniority
Senior, hands-on IC with technical leadership
