Senior Product Security Engineer

Trident Consulting is seeking a Sr. Product Security Engineer for one of our clients in Burlington, MA
. A global leader in business and technology services.

Position: Sr. Product Security Engineer

Location: Burlington, MA (Hybrid - 3 days onsite)

Salary range: $140K-160K + Benefits

We are seeking a hands‑on Senior Product Security Engineer to lead cybersecurity initiatives across the medical device product lifecycle. This role will work closely with firmware, software, QA, and regulatory teams to design and implement secure‑by‑design solutions for Windows and Linux‑based medical devices while ensuring compliance with FDA cybersecurity expectations and IEC 81001‑5‑1 standards.

• Design and implement product security architecture and secure development practices.
• Lead threat modeling, vulnerability management, and security risk assessments.
• Drive OS and application hardening for Windows/Linux platforms.
• Collaborate with firmware and software teams on secure coding, secure boot, encryption, and update mechanisms.
• Integrate automated security testing into CI/CD pipelines.
• Maintain cybersecurity documentation for FDA submissions, audits, and compliance activities.
• Support incident response, patch management, and third‑party vulnerability monitoring.
• Provide technical leadership and security guidance across cross‑functional teams.

• 7–10 years of experience in cybersecurity, software engineering, or related fields.
• 3–5 years focused on product or embedded systems security in regulated industries (medical devices, aerospace, automotive, or defense).

• Secure system design and threat modeling
• NIST 800-53, ISO 27001, ISO 14971, IEC 81001-5-1
• Secure coding standards (OWASP, CERT C/C++, CWE/SANS Top 25)
• Vulnerability management and security testing tools (SAST, DAST, SCA)
• CI/CD security, container security, and cloud/Linux environments
• Experience supporting FDA cybersecurity requirements and external security assessments.
• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or related field.

• Master’s degree in Cybersecurity, Software Engineering, or related discipline.
• Prior experience as a Product Security Lead for medical or industrial products.
• Experience integrating automated security testing into Dev Ops pipelines.