Principal Engineer, Product Cybersecurity
$120,000–$165,000 year
HybridRaleigh, North Carolina, United States or Round Lake, Illinois, United States
Job Summary
Own and direct the cybersecurity design and analysis of multiple medical devices, resolving difficult problems from conception to final design with team input. Lead implementation of medical device cybersecurity principles within an overall security architecture, including creating threat models, performing vulnerability scanning, and analyzing CWEs and CVEs. Create, own, and maintain system requirements, architectures, and risk analysis specifications for both embedded and hosted medical device systems. Provide direction to technical team members on implementing cybersecurity, integration, and connectivity deliverables while driving improvements through cross-functional teams. Lead discussions to resolve competing constraints between Engineering, Risk Management, Compliance, Clinical, Human Factors, Regulatory, and Marketing functions. Interface with regulatory bodies to ensure regional cybersecurity needs are met and ensure compliance with product development and Quality System requirements. BS in computer science or related field with 5+ years of industry experience required.
Required Qualifications
- BS in computer science, engineering, mathematics, information management, or related field
- 5+ years of industry experience
- Masters degree with 3+ years of experience
- Experience with threat modeling
- Experience with penetration testing
- Experience with fuzz testing
- Experience with vulnerability scanning
- Experience with secure code analysis
- Experience with cybersecurity related software such as Blackduck, Coverity, etc.
- Experience dealing with threat intelligence, CWEs and CVEs
- Familiarity with cybersecurity related organizations and certifications such as UL (UL-2900), ICS-CERT, FIPS 140, etc.
- Experience with cybersecurity functionality on embedded systems and hosted software applications
- Strong organization and communication skills
- Ability to convince management on courses of action with minimal assistance using both written and verbal methods
- Minimum of 3 days a week onsite
- Applicants must be authorized to work for any employer in the U.S.
- No sponsorship or visa transfer available
Desired Qualifications
- Demonstrate subject matter expert knowledge in state-of-the-art security principles
- Utilizes solid understanding of device and system connectivity concepts in a medical device domain
- Exhibits creativity and innovation in completing divisional and cross-functional/business unit goals and objectives
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.