Engineer II

Role Overview

The Engineer II - Product Security plays a critical role in securing Arthrex's engineering software delivery environment. You will work across AWS and Azure cloud platforms to ensure the safety and integrity of our digital assets, directly supporting our mission: Helping Surgeons Treat Their Patients Better™.

Key Responsibilities

• Cloud Security Monitoring & Detection: Utilize CSPM/CNAPP tools (e.g., Wiz), AWS Security Hub, GuardDuty, and Azure Defender for Cloud to monitor security findings. Assess severity levels, distinguish true positives from false alarms, and escalate confirmed issues according to established procedures.
• Detection Engineering & Tuning: Maintain and optimize detection rules, alert policies, and thresholds within cloud environments (AWS/Azure) to reduce noise and improve signal fidelity. Identify coverage gaps and recommend strategic adjustments to senior team members.
• Tooling & Log Pipeline Health: Ensure the integrity of security tooling and log ingestion pipelines across Engineering accounts and subscriptions. Verify that all cloud services are properly enabled, configured, and logging correctly to support a resilient security posture.
• Incident Response (IR) & Runbook Development: Contribute to the creation and maintenance of IR playbooks for engineering events. Participate in incident response activities including triage, containment guidance, evidence collection, and post-incident documentation/reporting.
• Compliance & Reporting: Support SOC 2 and HIPAA audit readiness by collecting evidence, documenting controls, and tracking gaps. Generate security reports for leadership that summarize findings, track remediation progress, and report tool health status.