Product Security Engineer

Cybersecurity Specialist

We're Actively Seeking Qualified Candidates For The Following Position

Background in security (education and/or certifications)
Willingness to create and maintain documentation
Excellent communication skills and willingness to work with less technical team members to understand security concepts.

Bachelor's degree related to computer science or cybersecurity
2 or more years of experience

This position is primarily responsible for supporting pre-market project teams in building security deliverables.
You will work with R&D teams to help them understand how to build products securely by design and how to maintain their security for their product lifetime.

• Working with medical device product teams to build security deliverables and documentation
• Building and updating SBOMs
• Building threat models for medical devices
• Build threat models for products and assess threats for risk and possible mitigations
• Build SBOMs for products and review their accuracy
• Review and interpret CVEs for impact on products
• Review and interpret penetration testing results
• Work with technical experts and product owners to measure risk associated with vulnerabilities
• Document risk assessments
• Recommend mitigations for security risks

• Bachelor's degree in computer engineering, software engineering, cybersecurity, computer science, or related field
• 2 years of experience in a cybersecurity-related role
• Experience with networking concepts
• Effective communication both verbally and in written form
• Experience with threat modeling tools, such as Microsoft Threat Modeling Tool
• Experience with vulnerability monitoring tools such as Dependency
• Track
  - Experience with using the NVD
• Familiarity with the Cyclone
  
  DX SBOM specification
• Experience with CVE interpretation
• Experience with CWE interpretation
• Experience with CVSS scoring methodology
• Experience explaining technical concepts to non-technical individuals
• Familiarity with FDA Pre and Post-market guidance
• Familiarity with the OWASP Top 10
• Familiarity with standards such as IEC 81001-5-1 and IEC 62304

Responsible for the planning, design and build of security architectures; oversees the implementation of network and computer security and ensures compliance with corporate cybersecurity policies and procedures.
Monitors cybersecurity requirements for local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, and related network devices.
Performs security assessments of applications and systems using penetration and vulnerability testing and risk analysis.
Function Specific:
Specialize in understanding cyber adversary tactics, technics, and procedures in the interest of protecting network.
Ability to detect and mitigate cyber incidents and vulnerabilities. Cyber defense operations, specialized penetration testing and threat intel & forensics as well as advanced security management skills.
Development expertise in cybersecurity considerations to meet evolving cloud computing, web development and mobile device requirements.

Using technologies, processes, and practices to protect computers, networks, programs and data from unauthorized access or attacks that are aimed for exploitation. Monitor and protect products and systems.

Typically an individual contributor with responsibility in a professional discipline or specialty. Delivers and/or manages projects assigned and works with other stakeholders to achieve desired results.
May act as a mentor to colleagues or may direct the work of other lower level professionals. The majority of time is spent delivering and overseeing the projects – from design to implementation - while and adhering to policies, using specialized knowledge and skills normally acquired through advanced education.

Autonomy:
Established and productive individual contributor.
Works independently with general supervision on larger, moderately complex projects / assignments. Organizational Impact:
Sets objectives for own job area to meet the objectives of projects and assignments.
Con…