Staff Product Security Engineer

Job Description

Primary Function of Position We are seeking a Staff Product Security engineer to join the software team within the Endoluminal business unit. The successful candidate in this role will serve as the primary security interface between the Endoluminal business unit and our centralized product security teams. This role spans embedded security for network-connected medical devices as well as cloud security for web applications and services. The ideal candidate is a strong individual contributor today with the potential to help shape our long-term security operating model, including mentoring engineers and contributing to future team-building efforts.

Essential Job Duties (Specific responsibilities and tasks an individual would be expected to perform in the role. Additional job duties may be determined by functional people manager)

• Act as the product security point of contact for the business unit, collaborating with centralized security, IT, compliance, and engineering teams.
• Drive secure-by-design practices across embedded medical devices and cloud-based applications.
• Provide hands-on technical leadership for security architecture, threat modeling, and risk assessments.

• Partner with software teams to manage embedded product
  security, including interfaces to external imaging systems,
  devices, removable media, networks, and service tooling.
• Partner with software teams to manage cloud product
  security, including web apps, services, data platforms, and
  pipelines.
• Translate corporate security standards into practical product implementations.
• Maintain a hands-on role in design reviews, code reviews, vulnerability management, pen
  testing, and incident response.
• Support regulatory and industry security requirements relevant to medical devices.
• Set best practices for tools and technologies that make our security posture more
  effective