Senior Product Security Engineer

Responsibilities

• Implement security requirements across the medical device development lifecycle by collaborating with teams to uphold best practices from design to deployment.
• Conduct threat modeling and vulnerability assessments to identify and mitigate security risks throughout the product lifecycle.
• Support the design and deployment of secure medical devices by implementing features such as secure boot, secure communications, data protection, secure updates, integration, and access controls.
• Implement and mature the digital health platform architecture to meet customer expectations and enable development of digital solutions across Neuromodulation and Pain & Hypertension, including PH My Future, Insights Dashboard, Remote Monitoring, Remote Programming, and the DBS Brain Sense Portal.
• Define and execute surveillance strategy across web applications and cloud‑native platforms.
• Implement and maintain security policies for medical devices following industry standards such as NIST, ISO 27001, and IEC 81001-5-1.
• Regularly assess compliance and work with development teams to improve security practices.
• Stay updated on cybersecurity trends in medical devices and health software, and work with others to improve security strategies and apply best practices.

• Previous experience as a cyber‑security engineer for cloud security products in a regulated industry.
• Experience in cybersecurity, threat modeling, security incident management, and contributing to proactive security strategies.
• Hands‑on experience in cybersecurity architecture, cloud security, and cryptography.
• Experience working in agile software development teams.
• Bachelor’s degree in Computer Science or a related field with 4+ years of experience in cyber‑security, embedded systems security, IoT security, IT security, or a related role.
• Advanced degree in Computer Science or a related field with significant academic work in cyber‑security and 3+ years of experience in a related role.
• Preferred: experience with medical devices or regulated industries.
• Strong understanding of cyber‑security concepts and frameworks (e.g., NIST, OWASP).
• Familiarity with security standards such as ISO 27001, ISO 14971, or HITRUST.
• Working knowledge of secure software development lifecycle (SDLC) principles and Dev Sec Ops .
• Strong understanding of advanced cryptography, Hardware Security Module concepts, and secure key generation and management.
• Proactive communication skills to identify, present, and persuade leadership on cyber‑security risks.
• Strong problem‑solving and analytical skills.
• Ability to collaborate effectively in cross‑functional teams.