Sr. Cybersecurity Specialist II - Aliso Viejo, CA

What You’ll Do:

The Senior Cybersecurity Engineer is a broad-scope, hands-on technical role responsible for engineering, operating, and maturing cybersecurity capabilities across the enterprise. Glaukos manages cybersecurity across several distinct security domains; this role will own primary accountability for several of these domains based on organizational need, team structure, and the candidate's areas of expertise.

Candidates are not expected to be specialists in all areas. Rather, Glaukos seeks engineers who bring deep proficiency in at least one or more domains, a working knowledge of adjacent areas, and the intellectual curiosity to grow. Domain ownership may evolve over time as the program matures and team needs shift.

This position partners closely with IT, Quality, Legal, and Privacy to protect Glaukos products, systems, and data while enabling innovation in a highly regulated medical device environment. The Senior Cybersecurity Engineer is expected to work independently within their domain(s), contribute to cross-domain initiatives, and help mentor junior team members.

This position partners closely with IT, Quality, Legal, and Privacy to protect Glaukos products, systems, and data while enabling innovation in a highly regulated medical device environment. The Senior Cybersecurity Engineer is expected to work independently within their domain(s), contribute to cross-domain initiatives, and help mentor junior team members.

Based on domain assignment, the Senior Cybersecurity Engineer will own the following responsibilities. Engineers assigned to multiple domains will be supported with appropriate resourcing and prioritization guidance from leadership.

Supply Chain Security

• Lead third-party and supplier cybersecurity assessments integrated into the procurement lifecycle.
• Govern Software Bill of Materials (SBOM) accuracy, update cadence, and traceability from component to product.
• Track and remediate supply chain vulnerabilities through coordinated processes with Engineering and suppliers.
• Develop and maintain supply chain security standards, questionnaires, and contractual security requirements.

Vulnerability Management

• Own and operate the enterprise vulnerability management program, including scanning cadence, triage, prioritization, and SLA tracking.
• Manage patch tracking and exception handling processes, including compensating controls and escalation of overdue items.
• Coordinate vulnerability disclosure (CVD) processes and customer notification workflows in partnership with product security and regulatory teams.
• Maintain dashboards and metrics to communicate vulnerability posture to leadership.

Network Security

• Play a key role in the design of network security architecture including firewalls, segmentation, zero trust principles, and secure remote access.
• Conduct network traffic analysis and manage intrusion detection/prevention systems (IDS/IPS).
• Confirm/ audit the hardening of network infrastructure supporting both corporate IT and device-connected environments.
• Partner with IT and engineering on secure network design for manufacturing-support and product-connected systems.

Cloud Security

• Audit cloud security controls across IaaS, PaaS, and SaaS platforms (AWS, Azure, GCP, and applicable SaaS tools).
• Perform cloud security posture management (CSPM), identity hygiene reviews, and misconfiguration remediation.
• Develop and enforce cloud security standards, guardrails, and architecture review processes.
• Ensure cloud-hosted workloads supporting medical devices and manufacturing meet applicable regulatory and security requirements.

Security Operations

• Support and mature Security Operations Center (SOC) capabilities, including alert triage, use case development, and SIEM/SOAR tuning.
• Manage security monitoring for device-supporting environments, including backup, restore, and attestation activities.
• Manage a 3rd party MSSP/MXDR that provides detection logic, playbooks, and runbooks to improve response fidelity and speed.
• Provide KPIs and operational reporting for security operations activities to the CISO and stakeholders.

Incident Response

• Lead and coordinate cybersecurity incident response activities, including containment, eradication, recovery, and post-incident reviews.
• Maintain and test the incident response plan (IRP), including tabletop exercises and sce