Sr Systems Engineer

A senior systems engineer is sought to lead product cybersecurity operations throughout the product lifecycle. This role will oversee incident response, continuous security surveillance, vulnerability management, risk assessment, and security monitoring. The successful candidate will collaborate closely with engineering, quality, regulatory, product management, IT, and operations teams to identify, prioritize, and mitigate cybersecurity risks impacting products.

Key responsibilities include leading the triage, investigation, containment, remediation, and recovery of product cybersecurity incidents, as well as conducting root-cause analyses. The role will coordinate cross-functional response teams, manage escalation processes, and ensure proper documentation and regulatory/customer notifications. Continuous monitoring of emerging threats, vulnerabilities, and threat intelligence relevant to the product portfolio is required, along with proactive assessment and mitigation of potential exposures.

The position will drive end-to-end vulnerability management, prioritizing issues based on severity, exploitability, exposure, and business or regulatory impact. Comprehensive cybersecurity risk and impact assessments will be conducted, translating technical findings into actionable recommendations for product, business, and regulatory stakeholders. Integration of cybersecurity signals, telemetry, and threat intelligence into security monitoring systems is expected, including defining detection use cases, alerting criteria, and opportunities for automation.

The role requires strong leadership communication, providing concise risk assessments and recommendations to senior management. Continuous improvement of cybersecurity processes, tools, automation, metrics, and operating models is essential, including the establishment of KPIs, dashboards, and lessons-learned initiatives.

Candidates should possess a bachelor's or master's degree in cybersecurity, computer science, engineering, information technology, or a related field, with significant cybersecurity experience. At least three years' experience in product cybersecurity, incident response, vulnerability management, threat intelligence, security operations, and risk management is required. Experience with regulated or safety-critical industries and relevant frameworks is preferred. Strong leadership, risk-based decision making, and executive communication skills are essential.

Must-Have

Skills:

incident response, vulnerability management, threat intelligence, security operations, cybersecurity risk management, SIEM

Nice-to-Have

Skills:

Product Security, SOC, threat modeling, security architecture, FDA cybersecurity requirements, IEC 81001-5-1, ISO 14971, IEC 62443, ISO 27001, cross-functional collaboration, executive communication, risk-based decision making

EOE Statement: Specialist Staffing Group is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

In addition to base pay, employees may be eligible for benefits such as health insurance, health savings accounts, retirement savings plans, life and disability insurance, and paid leave where required by applicable law. Eligibility may vary based on factors such as location and hire date and is subject to change.