BioSpace · 10 hours ago

Senior Product Cybersecurity Engineer II

United States

Full-time

Remote

Senior Level

$162K/yr - $247K/yr

6+ years exp

Maximize your interview chances

BiotechnologyCommunities

Comp. & Benefits

Insider Connection @BioSpace

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Develop and maintain security architecture for medical device products, ensuring that cybersecurity is integrated into the product lifecycle from design through deployment and updates

Conduct threat modeling, risk assessments and vulnerability analysis to identify potential cybersecurity threats for medical devices. Develop and implement strategies to mitigate the cybersecurity risks

Identify and drive implementation of security standards, protocols, encryption, authentication mechanisms and other implementations to ensure confidentiality, integrity and availability of medical devices in collaboration with the software engineers

Drive the cybersecurity testing activities for medical devices in collaboration with internal and external partners

Ensure that all medical device products comply with relevant national regulations and standards, such as HIPAA and FDA guidelines for medical devices

Work with product management, engineering, IT, InfoSec, and external stakeholders to define cybersecurity requirements and ensure that products meet these requirements

Stay abreast of the latest cybersecurity trends, threats, and technologies in the medical device sector. Recommend innovative security tools and technologies to enhance product cybersecurity

Provide coaching and mentorship to others in product cybersecurity topics and activities

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Product CybersecurityMedical Device ExperienceCybersecurity ArchitectureRisk Management MethodologiesSecurity Assessment ToolsHealthcare RegulationsEncryption TechnologiesAccess ManagementNetwork SecurityThreat ModelingVulnerability AnalysisHIPAA ComplianceFDA GuidelinesCISSP CertificationCISM CertificationCISA CertificationCRISC CertificationNIST Cybersecurity Framework

Required

Bachelor of Science in Computer Science, Cybersecurity, Engineering, or related field or equivalent training, fellowship, and/or work experience

6+ years of related work experience within medical device or IVD sector

Experience in product cybersecurity, particularly in the design and implementation of cybersecurity solutions for medical devices or related healthcare technology

Deep understanding of healthcare regulations and standards affecting medical device cybersecurity

Proficiency in security architectures, encryption technologies, identity and access, and network security

Experience with risk management methodologies and security assessment tools

Excellent communication and interpersonal skills, with the ability to explain complex cybersecurity concepts to non-technical stakeholders