Why This Role Stands Out
This remote role offers a fantastic opportunity to shape product security within the innovative medical device sector, allowing you to hone your skills in threat modeling and secure design. You'll thrive here if you're a proactive engineer passionate about safeguarding embedded systems and collaborating across dynamic teams to elevate security standards. Apply to make a significant impact on critical technology!
Quick Overview
Seniority
Mid Senior
Work mode
Hybrid
Location
United States
Posted
3 months ago
Embedded SystemsC#C++IoTPenetration Testing
Job Description
Job Title: Product Security Engineer (Medical Devices & Embedded Systems)
Location: Remote
Duration: 02/24/2025 to 12/31/2025
Location: Remote
Duration: 02/24/2025 to 12/31/2025
The Challenge:
The Product Security Engineer will drive the implementation of enterprise Product Security strategy within the orthopedics portfolio. This role involves enhancing security processes, collaborating across teams, developing security metrics, and promoting security awareness. Key responsibilities include:
The Product Security Engineer will drive the implementation of enterprise Product Security strategy within the orthopedics portfolio. This role involves enhancing security processes, collaborating across teams, developing security metrics, and promoting security awareness. Key responsibilities include:
Supporting new product development by reviewing security requirements and recommending secure design solutions.
Conducting threat modeling, penetration testing, software architecture reviews, and secure code analysis.
Managing post-market security activities, including vulnerability monitoring, patching, and compliance with contractual security requirements.
Conducting threat modeling, penetration testing, software architecture reviews, and secure code analysis.
Managing post-market security activities, including vulnerability monitoring, patching, and compliance with contractual security requirements.
Roles & Responsibilities:
Product Security Strategy: Contribute to the global Product Security Framework and ensure embedded medical devices meet the highest security standards.
Process Improvement & Collaboration: Work with engineering, product management, and compliance teams to enhance security policies for medical device development and support.
Metrics & Reporting: Develop and present security metrics to senior management, providing insights into security posture and progress.
Governance & Compliance: Ensure security measures align with regulatory requirements (FDA, 510k) and industry best practices.
Vulnerability Management & Remediation: Identify, prioritize, and assist in remediating vulnerabilities across the product portfolio.
Threat Modeling & Risk Assessments: Conduct due diligence, threat modeling, and risk assessments for both new and existing products.
Secure Software Development: Guide teams on secure coding practices, code reviews, and best practices for embedded systems security.
Customer & Vendor Security Compliance: Address security-related inquiries, contractual requirements, and compliance standards.
Security Awareness & Training: Lead security awareness initiatives and training sessions within the organization.
Post-Market Security Monitoring: Track and respond to new vulnerabilities in marketed devices, assisting with remediation and patching efforts.
Product Security Strategy: Contribute to the global Product Security Framework and ensure embedded medical devices meet the highest security standards.
Process Improvement & Collaboration: Work with engineering, product management, and compliance teams to enhance security policies for medical device development and support.
Metrics & Reporting: Develop and present security metrics to senior management, providing insights into security posture and progress.
Governance & Compliance: Ensure security measures align with regulatory requirements (FDA, 510k) and industry best practices.
Vulnerability Management & Remediation: Identify, prioritize, and assist in remediating vulnerabilities across the product portfolio.
Threat Modeling & Risk Assessments: Conduct due diligence, threat modeling, and risk assessments for both new and existing products.
Secure Software Development: Guide teams on secure coding practices, code reviews, and best practices for embedded systems security.
Customer & Vendor Security Compliance: Address security-related inquiries, contractual requirements, and compliance standards.
Security Awareness & Training: Lead security awareness initiatives and training sessions within the organization.
Post-Market Security Monitoring: Track and respond to new vulnerabilities in marketed devices, assisting with remediation and patching efforts.
Essential Skills & Qualifications:
Education: Bachelor's degree in Computer Science, Engineering, or a related field (MS preferred).
Experience: Minimum 6 years in security and/or embedded software engineering, preferably in regulated industries (medical devices is a plus).
Education: Bachelor's degree in Computer Science, Engineering, or a related field (MS preferred).
Experience: Minimum 6 years in security and/or embedded software engineering, preferably in regulated industries (medical devices is a plus).
Technical Skills:
o Expertise in real-time operating systems (e.g., QNX, Linux, Windows Embedded) and security hardening.
o Strong understanding of embedded systems security, secure software development, and vulnerability management.
o Experience with penetration testing, threat modeling, and security risk assessments.
o Proficiency in C, C++, C# with secure coding practices and code review experience.
o Familiarity with Software Bill of Materials (SBOM) and compliance implications.
o Expertise in real-time operating systems (e.g., QNX, Linux, Windows Embedded) and security hardening.
o Strong understanding of embedded systems security, secure software development, and vulnerability management.
o Experience with penetration testing, threat modeling, and security risk assessments.
o Proficiency in C, C++, C# with secure coding practices and code review experience.
o Familiarity with Software Bill of Materials (SBOM) and compliance implications.
Security & Regulatory Expertise:
o Knowledge of medical device security requirements, including FDA regulations, 510k submissions, and Quality Design Control.
o Experience with risk management frameworks and vulnerability remediation for medical devices.
o Knowledge of medical device security requirements, including FDA regulations, 510k submissions, and Quality Design Control.
o Experience with risk management frameworks and vulnerability remediation for medical devices.
Communication & Leadership:
o Strong collaboration skills with the ability to convey complex security concepts to non-technical stakeholders.
o Ability to influence cross-functional teams and drive security initiatives.
o Experience in developing and presenting security reports to senior management.
o Strong collaboration skills with the ability to convey complex security concepts to non-technical stakeholders.
o Ability to influence cross-functional teams and drive security initiatives.
o Experience in developing and presenting security reports to senior management.
Preferred Certifications (Not Required):
o CISSP, CEH, MCSD, CSSLP or similar security certifications.
o CISSP, CEH, MCSD, CSSLP or similar security certifications.
Additional Skills:
o Knowledge of cloud-based IoT security is a plus.
o Strong problem-solving and strategic thinking abilities.
o Knowledge of cloud-based IoT security is a plus.
o Strong problem-solving and strategic thinking abilities.
Similar jobs
- SA
Global Security Operations Center (GSOC) Operator
NewAuto ApplySaronic
Austin🇺🇸On-site8 hours agoTechnology - BA
Cyber Analyst, Junior with Security Clearance
NewBooz Allen Hamilton
Washington, DC🇺🇸$53k - $108k/yrOn-siteYesterdaySQLBashPythonTechnology - BA
Red Team Penetration Tester with Security Clearance
NewBooz Allen Hamilton
Dahlgren, VA🇺🇸$86.8k - $198k/yrOn-siteYesterdayPHPSQLHTML+3Technology - BA
Vulnerability Management Lead with Security Clearance
NewBooz Allen Hamilton
Reston, VA🇺🇸$99k - $225k/yrOn-siteYesterdayPythonPowerShellSQL+6Technology - IS
Cyber Engineer-Virginia Beach, VA with Security Clearance
NewiSenpai
Virginia Beach, VA🇺🇸$158k - $165k/yrHybridYesterdayAgileProject ManagementData AnalysisTechnology - AS
Network Security Engineer, Senior | Top Secret w/SCI eligibility with Security Clearance
NewAmerican Systems Corporation
ridge crest, CA🇺🇸$150k - $170k/yrHybridYesterdayVMwareLinuxNetwork AdministrationTechnology - BA
Software Security Engineer with Security Clearance
NewBooz Allen Hamilton
Rome, NY🇺🇸$69.3k - $158k/yrOn-siteYesterdayC++JavaPython+3Technology - LE
Tier 2 Security Operations Center (SOC) Analyst with Security Clearance
NewLeidos
Alexandria, VA🇺🇸$87.1k - $157.4k/yrHybridYesterdayTechnology - PA
Utilities Vulnerability Assessment Engineer with Security Clearance
NewParsons
Fort Belvoir, VA🇺🇸$112.2k - $196.4k/yrHybridYesterdayMicrosoft OfficeMicrosoft PowerPointEngineering - AT
Cyber Threat Hunt Analyst with Security Clearance
NewAthena Technology Group
Fort Gordon, GA🇺🇸HybridYesterdayData AnalysisTechnology - AM
Personnel Security SME/ Namecheck Analyst with Security Clearance
NewAmentum
Chantilly, VA🇺🇸HybridYesterdayMicrosoft OfficeAdministrative - LE
Information Systems Security Engineer (ISSE) with Security Clearance
NewLeidos
Mountain View, CA🇺🇸$107.9k - $195.1k/yrHybridYesterdayTechnology
