Position Summary: As a Senior Staff Product Security Engineer, you will play a crucial role in ensuring the security of the embedded software within our suite of medical devices. You will lead and contribute to the development of robust security measures, protecting sensitive healthcare data and enhancing the overall security posture of our products. This position demands a deep understanding of cybersecurity principles, extensive experience in embedded systems security, and a commitment to maintaining the highest standards of quality and compliance.
Responsibilities: - Embedded Software Security:
- Lead the design, implementation, and testing of security features within the embedded software of medical devices.
- Conduct thorough security assessments and vulnerability analyses to identify and address potential risks.
- Security Architecture:
- Collaborate with cross-functional teams to define and implement secure software architectures for medical devices.
- Provide expertise in secure coding practices and assist in the selection of appropriate security technologies.
- Risk Management:
- Evaluate and prioritize security risks, working to mitigate vulnerabilities and ensure compliance with industry standards and regulations.
- Develop and implement risk management strategies to safeguard patient data and maintain product integrity.
- Incident Response:
- Develop and maintain incident response plans for potential security breaches, ensuring a swift and effective response to any security incidents.
- Lead investigations into security incidents and contribute to post-incident reports.
- Security Training and Awareness:
- Provide training and mentorship to development teams on secure coding practices and security best practices.
- Foster a culture of security awareness and compliance throughout the organization.
Qualifications: - Bachelor's or Master's degree in Computer Science, Electrical Engineering, or related field.
- 7+ years of professional experience in product security engineering, with a focus on embedded systems.
- In-depth knowledge of cybersecurity principles, secure coding practices, and common security vulnerabilities.
- Experience with medical device security standards and regulations (e.g., FDA guidance, ISO 13485) is highly desirable.
- Strong programming skills, particularly in C/C and assembly language.
- Excellent communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams.
Medical Device Product Security Engineer