Principal Product Security Engineer, Medical Device

What you'll do

• Implement security requirements across the medical device development lifecycle from design through deployment.
• Conduct threat modeling and vulnerability assessments to identify and mitigate risks throughout the product lifecycle.
• Design and deliver secure features including secure boot, communications, data protection, and update mechanisms.
• Apply medical device cybersecurity standards such as NIST, OWASP, and IEC 81001-5-1 to development practices.
• Serve as a technical subject matter expert to mentor others and drive long-term security strategy.
• Monitor and share best practices regarding emerging cybersecurity trends affecting medical devices and health software.

What we're looking for

• A Bachelor's degree with 7 years of experience, a Master's with 5 years, or a PhD with 3 years of relevant experience is required.
• Experience in embedded device security within a regulated industry is required.
• Strong understanding of cybersecurity concepts and frameworks such as NIST and OWASP is required.
• Deep knowledge of secure software development lifecycle principles and security-by-design practices (preferred).
• Experience collaborating with engineering teams to identify and address product security risks (preferred).
• Familiarity with medical device standards including IEC 81001-5-1, ISO 14971, and FDA guidance (preferred).
• Experience supporting FDA or other regulatory cybersecurity submissions (preferred).
• Work authorization at the time of hire and for the duration of employment.