Senior Principal Engineer, Product Security

Senior Principal Engineer, Product Security at Vantive summary:

The Senior Principal Engineer, Product Security at Vantive is responsible for designing and implementing security measures across medical device software products, focusing on preventing breaches and minimizing attack surfaces. The role involves collaborating with development teams to enforce secure coding practices, managing security vulnerabilities, and ensuring compliance with security standards in cloud environments. The position requires extensive experience in secure software development lifecycle, web application security, and cloud security controls within a healthcare technology setting.

Vantive is a vital organ therapy company on a mission to extend lives and expand possibilities for patients and care teams everywhere. For 70 years, our team has driven meaningful innovations in kidney care. As we build on our legacy, we are deepening our commitment to elevating the dialysis experience through digital solutions and advanced services, while looking beyond kidney care and investing in transforming vital organ therapies.

Greater flexibility and efficiency in therapy administration for care teams, and longer, fuller lives for patients— that is what Vantive aspires to deliver.

We believe Vantive will not only build our leadership in the kidney care space, it will also offer meaningful work to those who join us. At Vantive, you will become part of a community of people who are focused, courageous and don’t settle for the mediocre. Each of us is driven to help improve patients’ lives worldwide. Join us in advancing our mission to extend lives and expand possibilities.

Your Role

As the Sr. Principal Product Security Engineer you will be responsible for designing, building, testing and implementing systems with the primary goal of product security across Vantive’s software within the medical device product portfolio in various operating environments. Prevention of breach of Intellectual Property (IP), Attack surface minimization, preventive security and privacy controls, incident/vulnerability management are some of the focal areas for this position.

This role requires deep knowledge of security by design, web-based secure code principles, and web application development including microservice security and system hardening in cloud environments. Candidates should have experience in web-application development or cloud software development with a desire to secure products protecting our customers and patients who use our products each day. Success in this role required a strong understanding and interest of the latest security standards, systems, protocols, and products.

What you'll be doing

• Work directly with software developers in building a security by design mindset by defining implementations and coding inline with the Application Security Program mandates

• Implement secure code solutions, design patterns, and code guidelines that meet security and privacy requirements defined in the security plans, risk assessments, policies, and procedures

• Support security project governance through scheduling activities, planning and prioritization

• Proactively drive security solutions implementation in-alignment with the development leads, security architects and product owner(s)

• Drive feature implementations in line with the architecture via designs, coding, reviews and tests. Perform Proof of Concept (POC) activities as necessary

• Review, Analyze and mitigate SAST, DAST, SCA, and penetration test results in collaboration with the developers for various non-medical and software as medical devices (SaMD) product life cycles

• Review current software security control measures and implement security enhancements for multiple cloud-based products

• Participate in post-market product analysis to support vulnerability investigations as required as well as be engaged in continuous security monitoring

What you'll bring

• Experienced security developer able to interpret and guide software development teams on secure coding practices and application security test report interpretation for various coding languages and multiple cloud services

• Strong knowledge of secure…