Staff Product Security Engineer
Tasks
- Conduct security design reviews
- Conduct third-party risk management
- Develop cybersecurity documentation for regulatory requirements
- Drive adoption of Secure Product Development Framework
- Drive root cause analysis and preventive actions
- Ensure compliance with FDA cybersecurity requirements
- Ensure compliance with HIPAA and GDPR
- Lead secure product development security strategy
- Lead threat modeling and security risk assessments
- Maintain threat models and data flow diagrams
- Oversee SBOM management and software supply chain security
- Oversee vulnerability management programs
- Partner with cross functional teams to embed security across lifecycle
- Review secure architectures across embedded and cloud
- Support incident response and post market monitoring
Perks/Benefits
- N/A
Skills/Tech-stack
800-53 | Application Security | CI/CD | Cause analysis | Cybersecurity Requirements | DAST | Data Flow | Data Flow Diagrams | Development Lifecycle | FDA Cybersecurity | FDA Cybersecurity Requirements | Flow diagrams | GDPR | HIPAA | IEC 62304 | ISO 14971 | Incident Response | NIST | NIST SP | NIST SP 800 | NIST SP 800-53 | PSIRT | Risk Management | Root Cause Analysis | Root cause | SAST | SBOM | SCA | SP 800-53 | Secure Architecture | Secure Design | Secure Software | Secure Software Development | Secure Software Development Lifecycle | Software Development Lifecycle | Software Supply Chain | Software supply chain security | Supply chain security | Third Party | Third-Party Risk | Third-party risk management | Threat modeling | Vulnerability Management
Education
Related jobs
-
API Integration | CI/CD | Frontend Development | Frontend architecture | GraphQLSenior-level Full TimeSanta Clara, California, United States R8h ago
-
Staff Production Engineer (Cloud Platform & Reliability – Machine Identity Security) - hybrid USD 181K-226KAKS | AWS | Ansible | ArgoCD | AzureSenior-level Full TimeSanta Clara, California, United States R9h ago
-
Mid-level Full TimeFrisco, TX, United States R9h ago
-
Senior Security Compliance Engineer USD 146K-195K800-53 | Audit management | Awareness Training | CIS Controls | Continuous Control MonitoringPeriodic travel | Remote workSenior-level Full TimeRemote (United States); Canada R1d ago
-
Sr. Security Engineer (Data Security) USD 170K-185KAccess Control | Azure | Azure Monitor | Azure RBAC | CI/CD401k match | Birthday treat | Company sponsored virtual events | Free dental insurance | Free medical insuranceSenior-level Full TimeRemote, US R1d ago
-
Staff Application Security Engineer USD 170K-200KAPI Security | AWS | AWS SCPs | Abuse prevention | AuthenticationSenior-level Full TimeRemote (United States); Canada R1d ago
-
Infrastructure & Security Engineer USD 160K-205KAWS | Access Management | Audit Logging | Azure | Data Residency401k retirement savings plan | Accident insurance | Basic life and AD and D disability insurance | Comprehensive medical, dental and vision plans | Critical illness insuranceSenior-level Full TimeSan Diego, CA, Remote R1d ago
-
Cybersecurity Incident Response Engineer, Sr USD 117K-190KAutomation | Cloud Security | Custom scripting | Cybersecurity | Endpoint SecuritySenior-level Full TimeRemote, United States R1d ago
-
Senior Software Engineer - Robotics USD 134K-184KAgent coordination | Agile | Algorithms | C++ | CI/CDRemote work flexibilitySenior-level Full TimeWoburn, MA R1d ago
-
Sr. SOC Security Engineer II USD 125K-140KAWS | Automation | Azure | CIS Controls | Cause analysis401k match | Dental insurance | Educational assistance | Flexible work schedule | Health insuranceSenior-level Full TimeWashington DC R1d ago
-
Senior Technical Support Engineer USD 128K-140KAWS | AWS EKS | Azure | CI/CD | DockerCoworking stipend | Flexible time off | Health insurance coverage | Paid parental leave | Phone and internet stipendSenior-level Full TimeUnited States - Remote R1d ago
-
AWS | Access Control | Azure | Backup and Recovery | BashOn-call rotation | PTO | Weekend after hours supportSenior-level Full TimeRemote, UNITED STATES, United States R1d ago
-
Senior DevSecOps Engineer USD 100K-130KAWS Secrets | AWS Secrets Manager | Advanced Security | Bicep | CI/CD401k plan with company matching | Bereavement | Employee assistance program | Employee discount program | Health dental vision careSenior-level Full TimeRemote - Nationwide, United States R1d ago
-
Senior Software Engineer USD 150K-180KAlerting | Asynchronous Messaging | BDD Testing | CI/CD | Cloud platformBenefits package | Equity | Remote work | U.S. citizen requirementSenior-level Full TimeRemote in the US R1d ago
-
Staff Threat Detection Engineer USD 175K-240KAWS | Alert triage | Automation | Bash | Cloud loggingSenior-level Full TimeRemote - USA R1d ago
-
Summer Internship - Security Engineering USD 50K-50KAWS | Access Control | Authentication | Azure | BashCollaborative team environment | Hands On Security Engineering Experience | Remote-first cultureEntry-level InternshipRemote, United States R1d ago
-
Director, Field Security (Remote Eligible) USD 235K-315K800-53 | Customer security | FedRAMP | FedRAMP Moderate | GRC401k match | Dental insurance | Flexible time off | Health insurance | Life insuranceExecutive-level Full Time-REMOTE, USA- R2d ago
-
Senior DevSecOps Engineer USD 150K-180KAWS | Admission control | Alert triage | CI/CD | CJIS401k | Accident insurance | Additional life insurance | Central Time Zone availability | Employer-paid disability insuranceSenior-level Full TimeChicago, IL, US R2d ago
-
Cloud Engineer USD 160K-180KARM Templates | AWS | AWS CloudFormation | Azure Resource | Azure Resource Manager401k match | Health insurance | Life insurance | Paid time off | Professional development reimbursementMid-level Full TimeUnited States - Remote R2d ago
-
Security Engineer IT - Remote USD 74K-118KAccess Control | Access Management | Audit Logging | Credential rotation | CyberArkCompliance focused environment | Operational stability | Remote workMid-level Full TimeHome, United States R2d ago
-
Senior Associate - IAM Engineer USD 124K-177KAWS | Access Management | Active Directory | Azure Active Directory | CyberArkAdoption Assistance | Leave programs | Student loan repayment programsMid-level Full TimeRemote, any state, US R2d ago
-
Cyber Data Protection Engineer (DLP Operations) USD 89K-121KAlert triage | Audit Evidence Collection | Audit evidence | Control Self-Assessment | Control compliance401k retirement savings | Caregiver leave | Life insurance | Long-term disability | Medical, dental, and vision benefitsMid-level Full TimeWork at Home - Kentucky, United … R2d ago
-
Risk Management Engineer USD 79K-119KBusiness Intelligence | CGMP | Dashboards | Data Analysis | Data Visualization401k contributions | Bonus eligible | Continuing education and training | Employee assistance program | Employee resource groupsSenior-level Full TimeREMOTE- Illinois, United States R2d ago
-
Vulnerability Engineer USD 85K-130KAzure DevOps | Bug Bounty | Continuous Control Testing | Continuous control | Control TestingHybrid schedule | On-call rotation support | Remote work | Training and professional developmentEntry-level Full TimeUSA-Remote, United States R2d ago
-
Information Security Engineer | North America (EST) USD 167K-215KAWS | Azure | Browser Extension | Browser extension security | Browser managementAdditional country based perks and benefits | Optional WeWork access | Remote work flexibility | Stock grant opportunitiesSenior-level Full TimeUSA R2d ago