Job Title: Cybersecurity Engineer
We are seeking a skilled Cybersecurity Engineer to lead our Product Security team in cultivating a top-performing team that backs various products within the business unit. This includes boosting team efficiency to minimize security risk and strengthen product resilience while ensuring alignment with our cybersecurity strategy and regulatory standards.
Key Responsibilities:
1. Lead and cultivate a high-performing Product Security team that supports multiple products within the business unit.
2. Boost team efficiency to minimize security risk and strengthen product resilience within the portfolio, while ensuring alignment with our cybersecurity strategy and regulatory standards.
3. Nurture a culture of accountability, innovation, and continuous improvement to drive tangible outcomes.
4. Foster risk reduction and elevate security measures within the product portfolio by incorporating secure-by-design principles, threat modeling, and proactive vulnerability management.
5. Collaborate with cross-functional teams across R&D, Quality, Regulatory, and IT to embed security throughout the product lifecycle from inception to post-market.
6. Translate cybersecurity strategy into practical plans, aligning team efforts with our enterprise security objectives, regulatory demands, and customer expectations.
7. Track and report security status, using metrics and benchmarks to showcase progress, identify weaknesses, and inform decision-making.
8. Provide engineering teams with guidance on understanding security requirements and identifying practical solutions for incorporating them into new and existing products.
9. Deploy software security solutions and develop products following recognized industry norms for medical device security, encompassing encryption, disaster recovery, authentication, audit logging, hardening measures, patch management, and vulnerability monitoring.
10. Conduct product security risk evaluations, hazard assessments, and offer guidance on vulnerability remediation to software engineers in product development, both on-site and off-site.
11. Assist in the Product Security Documentation process, including offering standardized Product Security documentation, employing document management systems, coordinating and assisting in the document review and approval process, and ensuring that all tasks are completed promptly and meet the necessary quality standards.
12. Facilitate technical design appraisals and code examinations, supply clear, actionable recommendations to project team members.
13. Support product development teams in creating Incident and Vulnerability Management Plans and Product Security White Papers.
14. Contribute to teams handling product security incidents.
15. Collaborate with other technical departments like the Penetration Testing Team, Systems, Hardware Engineering, Quality, and technical services.
16. Ensure compliance with our development policies and software quality procedures.
About You
* Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or related fields, or equivalent work experience.
* Minimum of 5 years of experience in IT-Security architecture, secure software development, systems & architecture concepts, and designs.