Назад
Company hidden
обновлено 6 дней назад

Principal Product Security Engineer (Medical Device)

160 800 - 241 200$
Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Principal Product Security Engineer (Medical Device): Securing cardiac ablation medical device solutions and embedded systems with an accent on threat modeling, vulnerability mitigation, secure architecture, and cybersecurity controls across the product lifecycle. Focus on integrating secure boot, communications, data protection, software updates, and access controls while applying NIST, OWASP, and medical device cybersecurity standards.

Location: Mounds View, Minnesota, or Newton, Massachusetts, United States; onsite with a minimum of four days per week in the office.

Salary: $160,800–$241,200 per year.

Company

hirify.global develops healthcare technologies intended to alleviate pain, restore health, and extend life.

What you will do

  • Integrate product security requirements across the medical device development lifecycle.
  • Conduct threat modeling and vulnerability assessments, prioritizing and mitigating risks.
  • Support secure architecture for medical devices, including secure boot, secure communications, data protection, software updates, system integration protections, and access controls.
  • Apply NIST, OWASP, and IEC 81001-5-1 guidance with development teams.
  • Serve as a technical subject matter expert, mentor colleagues, and advance product security strategy.

Requirements

  • Bachelor’s degree and at least 7 years of relevant experience, or a master’s degree with 5 years, or a PhD with 3 years.
  • Strong experience in embedded device security within a regulated industry.
  • Strong understanding of cybersecurity concepts and frameworks, including NIST and OWASP.
  • Experience partnering with engineering teams on cybersecurity for real-time systems, embedded firmware, connected devices, or related product security contexts.
  • U.S. work authorization is required; sponsorship is available for Principal-level roles and above.

Nice to have

  • Secure software development lifecycle and security-by-design experience.
  • Knowledge of IEC 81001-5-1, ISO 14971, and FDA medical device cybersecurity guidance.
  • Experience supporting FDA or other regulatory cybersecurity submissions.
  • Experience with connected healthcare systems or cloud-connected medical devices.
  • CompTIA Security+, CISSP, or similar certification.

Culture & Benefits

  • Work within a global healthcare technology organization focused on patient outcomes.
  • Health, dental, and vision insurance, plus health and dependent-care spending accounts.
  • Life insurance, disability coverage, paid time off, and paid holidays.
  • 401(k) plan with employer contribution and match.
  • Tuition assistance, incentive plans, employee stock purchase plan, and employee assistance program.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →