Senior Cloud Security Engineer

Spacelabs Healthcare Ltd.; City of Edinburgh; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading medical technology firm in Edinburgh is seeking a Senior Cloud Security Engineer to lead cybersecurity and privacy functions. The role involves collaborating with project teams to ensure robust security throughout the product lifecycle. Candidates should have extensive experience in cloud security, risk management, and knowledge of HIPAA and GDPR regulations. This is a full-time position offering a mid-senior level role in a dynamic environment.

Qualifications

• 10+ years in cybersecurity and privacy compliance.
• 5–10 years in cloud security, preferably AWS.
• Experience leading product cybersecurity projects.

Responsibilities

• Drive cybersecurity and privacy by design for assigned projects.
• Lead threat management and security monitoring.
• Manage customer cybersecurity assurance.

Skills

Cybersecurity

Privacy compliance

Cloud security

Risk management

Secure SDLC

Education

Bachelor’s degree in Computer Science or related field

Master’s degree in Computer Science or related field

Tools

AWS

ISO 2700x

NIST 800 series

HIPAA compliance

GDPR compliance

Job description

Overview

At Spacelabs Healthcare, we are on a mission to provide continuous innovation in healthcare technology for better clinical and economic outcomes. Our scalable solutions deliver critical patient data across local and remote systems, enable better-informed decisions, increase efficiencies, and create a safer environment for patients.

Role Overview

As a Senior Cloud Security Engineer you will lead cybersecurity and privacy functions for our products. This role partners closely with Spacelabs project teams to ensure robust privacy and security throughout the product lifecycle. Acting as a trusted advisor, you will collaborate with Engineering and Quality/Regulatory teams to maintain a strong security posture. Additionally, you will be responsible for managing members of the Cybersecurity Team.

Key Responsibilities

• Drive cybersecurity and privacy by design for assigned projects.
• Represent cybersecurity in product development and risk assessments.
• Lead threat management, technical analysis, and monitoring of security signals.
• Manage customer cybersecurity assurance, including labeling, inquiries, and vulnerability reports.
• Investigate cybersecurity and privacy incidents for assigned projects.

Qualifications

• 10+ years in cybersecurity and privacy compliance.
• 5–10 years in cloud security (AWS preferred).
• Experience leading product cybersecurity projects and risk management (medical device/healthcare preferred).
• Strong knowledge of standards (ISO 2700x, NIST 800 series) and regulations (HIPAA, GDPR, FDA guidelines).
• Expertise in Secure SDLC, OS hardening, network security, web and database security, and cloud architecture.
• Certifications: CISSP, CISM, CISA, Security+, Cloud Security Alliance, or SANS Cloud Security.
• Bachelor’s degree + 15 years or Master’s + 10 years in Computer Science, Cybersecurity, or related field.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Information Technology and Engineering

Industries

• Medical Equipment Manufacturing