Duties: Support product development teams by participating in the specification, development, verification, and deployment of security measures for new and existing products running Linux or Windows operating systems. Assist in proposing solutions and contributing to the technical direction for product security development, ensuring alignment with secure architecture designs. Contribute to the development and execution of security plans and product security specifications. Conduct vulnerability scans on software under the guidance of lead engineers to identify potential security issues before product release. Support cybersecurity risk management activities, including assisting in threat modeling and vulnerability assessments, and help implement risk controls based on CVSS (Common Vulnerability Scoring System) scores. Participate in design and code reviews to identify potential security vulnerabilities, making appropriate recommendations. Assist development teams in the initial stages of penetration and fuzz testing for new products containing software components. Assist in drafting customer-facing product security documents, such as MDS2 (Manufacturer Disclosure Statement for Medical Device Security) forms, under supervision. Hybrid office/home remote permitted.
Requirements: Masters degree in computer science, informatics, cybersecurity, information technology or a closely related field plus three years of relevant post-bachelors experience. Alternatively, employer will accept a bachelors degree plus five years of post-bachelors experience. Experience must include the following. The required skills do not need to be maintained over the full term of required experience.
Cybersecurity & FDA Regulatory Compliance Secure Coding Practices, Application Security Testing (SAST/DAST), and Software Composition Analysis (SCA) Threat Analysis & Risk Management for IT, IOT, OT and Software-based Systems Secure Architecture Design & Cryptography Penetration Testing & Vulnerability Assessment DevSecOps & Cloud Security Conducting Software Composition Analysis (SCA) to identify and manage risks associated with open-source components Ensuring cybersecurity and regulatory compliance aligned with industry-standard frameworks