Product Security Engineer

About the role

Lead product cybersecurity operations across the product lifecycle, including incident response, continuous surveillance, vulnerability management, risk assessment, and security monitoring. Partner cross-functionally with Engineering, Quality, Regulatory, Product Management, PSO, Global-IT, and Operations to identify, prioritize, and mitigate cybersecurity risks.

Responsibilities

• Cybersecurity Incident Response: Lead incident triage, investigation, containment, remediation, recovery, and root-cause analysis for product cybersecurity incidents. Coordinate cross-functional response teams, escalation, documentation, and regulatory/customer notification assessments.
• Continuous Security Surveillance: Monitor emerging threats, vulnerabilities, exploits, security advisories, and threat intelligence relevant to the product portfolio. Assess emerging threats and proactively identify potential product exposure and required security actions.
• Vulnerability Management: Lead end-to-end vulnerability management, from identification and risk assessment through remediation, mitigation, and closure. Prioritize vulnerabilities based on severity, exploitability, exposure, product impact, and business/regulatory risk.
• Cybersecurity Risk & Impact Assessment: Conduct cybersecurity risk and impact assessments across the product lifecycle, including threats, vulnerabilities, attack paths, and security controls. Translate technical findings into product, patient/customer, business, and regulatory risk and recommend appropriate mitigation or risk acceptance.
• SIEM / SOC & Security Monitoring: Integrate product cybersecurity signals, telemetry, threat intelligence, and vulnerability data into security monitoring. Define monitoring requirements, detection use cases, alerting, escalation criteria, and opportunities for automated threat detection.
• Leadership Communication: Provide timely executive communication on significant incidents, emerging vulnerabilities, cybersecurity risk, and remediation status. Translate complex technical issues into concise risk assessments, recommendations, decisions, and business impact for senior leadership.
• Cross-Functional Collaboration: Collaborate with Engineering, Software/Firmware, Quality, Regulatory, Product Management, Operations, and IT teams. Drive cybersecurity alignment across product development, deployment, monitoring, post-market surveillance, and lifecycle management.
• Continuous Improvement: Develop and mature cybersecurity processes, tools, automation, metrics, and operating models to improve security posture and response effectiveness. Establish KPIs/KRIs, dashboards, lessons-learned processes, and continuous improvement initiatives across product cybersecurity operations.

Qualifications

Bachelor's or Master's degree in Cybersecurity, Computer Science, Engineering, Information Technology, or related field, with significant cybersecurity experience. 3+ years experience in product cybersecurity, incident response, vulnerability management, threat intelligence, security operations, and cybersecurity risk management.

Skills

• Experience with Product Security, SIEM/SOC, vulnerability/exposure management, threat modeling, security architecture, and post-market cybersecurity.
• Experience with regulated or safety-critical industries and frameworks such as FDA cybersecurity requirements, IEC 81001-5-1, ISO 14971, IEC 62443, or ISO 27001.
• Strong cybersecurity leadership, risk-based decision