Назад
Company hidden
обновлено 4 дня назад

Sr. Product Security Engineer - Post Market Surveillance (Medical Device Cybersecurity)

132 000 - 198 000$
Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Sr. Product Security Engineer - Post Market Surveillance (Medical Device Cybersecurity): Leading cybersecurity surveillance and risk management for fielded medical devices and supporting systems with an accent on vulnerability assessment, security event analysis, product impact evaluation, and post-market compliance. Focus on maintaining security assets, updating threat models and SBOM expectations, supporting regulatory audits, and driving corrective actions through closure.

Location: Fridley, Minnesota, United States. The role requires unrestricted U.S. work authorization at hire and throughout employment; sponsorship is available only for Principal-level roles and above.

Salary: $132,000–$198,000 per year in U.S. locations, excluding Puerto Rico and specific California locations.

Company

hirify.global develops healthcare technologies and medical devices across global neuromodulation and pelvic health programs.

What you will do

  • Monitor vulnerabilities, field complaints, anomalous behavior, and suspected security events affecting released medical products.
  • Assess exploitability, severity, product impact, escalation needs, remediation, and issue disposition.
  • Maintain security asset visibility, including keys, certificates, credentials, trust anchors, and signing infrastructure.
  • Support secure provisioning, certificate and key lifecycle management, and post-market security operations.
  • Update security risk analyses, threat models, hazard analyses, residual-risk assessments, and SBOM expectations.
  • Represent Product Security in regulatory audits, FCA, CAPA, quality reviews, customer assurance activities, and standards forums.

Requirements

  • Bachelor’s degree in Computer Engineering, Electrical Engineering, Computer Science, Cybersecurity, or a related field with 4 years of relevant experience, or a master’s degree with 2 years of relevant experience.
  • Extensive experience in product security, cybersecurity, embedded or software systems, or regulated product development.
  • Unrestricted U.S. work authorization is required at the time of hire and for the duration of employment.
  • Experience or knowledge in vulnerability management, CVSS, threat modeling, security risk analysis, SBOM/SCA, incident analysis, and medical-device cybersecurity is preferred.
  • Knowledge of FDA cybersecurity guidance, EU MDR, ISO 13485, and ISO 81001-5-1 is preferred.
  • Strong decision-making, documentation, prioritization, communication, and cross-functional relationship-building skills.

Culture & Benefits

  • Regular employee benefits include health, dental, vision, life, disability, and paid time off programs.
  • 401(k) plan with employer contribution and match, employee stock purchase plan, and incentive plans.
  • Health Savings Account, Flexible Spending Account, dependent daycare spending account, and tuition assistance.
  • Short-term incentive eligibility through the hirify.global Incentive Plan.
  • Equal employment opportunity and reasonable accommodation support.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →