Job Description
KAYGEN is an emerging leader in providing top talent for technology-based staffing services. We specialize in providing high-volume contingent staffing, direct hire staffing and project-based solutions to companies worldwide ranging from startups to Fortune 500 and Managed Service Providers (MSP) across a wide variety of industries.
Job Title: Product Security Engineer (Embedded)
Location: Irvine, CA -- 4 days onsite, 1 Day remote (Per Week)
Duration: 12 Months
Position Summary
The Product Security Engineer (Embedded) will support the security of physical, IoT, and embedded medical devices, including embedded Linux and Windows-based platforms, throughout the engineering and product development lifecycle.
The engineer will contribute to the development and delivery of secure products in alignment with applicable industry standards and global regulatory requirements. Working under the guidance of senior product security team members, this role will execute product security activities, identify and help mitigate security risks, and collaborate closely with software engineering, R&D, and other cross-functional stakeholders.
Key responsibilities include hands-on participation in threat modelling, vulnerability scanning and remediation, security risk assessments, secure design reviews, security requirements implementation, and product security documentation.
The ideal candidate will have developed technical expertise in embedded security, strong problem-solving abilities, and the ability to work effectively in an agile engineering environment. A positive work ethic, strong communication skills, and a commitment to project objectives are essential.
Key Responsibilities
Security Requirements & Implementation
Location: Irvine, CA -- 4 days onsite, 1 Day remote (Per Week)
Duration: 12 Months
Position Summary
The Product Security Engineer (Embedded) will support the security of physical, IoT, and embedded medical devices, including embedded Linux and Windows-based platforms, throughout the engineering and product development lifecycle.
The engineer will contribute to the development and delivery of secure products in alignment with applicable industry standards and global regulatory requirements. Working under the guidance of senior product security team members, this role will execute product security activities, identify and help mitigate security risks, and collaborate closely with software engineering, R&D, and other cross-functional stakeholders.
Key responsibilities include hands-on participation in threat modelling, vulnerability scanning and remediation, security risk assessments, secure design reviews, security requirements implementation, and product security documentation.
The ideal candidate will have developed technical expertise in embedded security, strong problem-solving abilities, and the ability to work effectively in an agile engineering environment. A positive work ethic, strong communication skills, and a commitment to project objectives are essential.
Key Responsibilities
Security Requirements & Implementation
- Support engineering teams in defining and implementing security requirements and controls for products and product features.
- Contribute to the implementation of security technologies and controls, including:
- Encryption
- Authentication and authorization
- Audit logging
- System hardening
- Software Bill of Materials (SBOM)
- Patch management
- Vulnerability monitoring
- Antivirus and antimalware controls, where applicable.
- Help ensure security requirements align with applicable industry standards and regulatory expectations for medical and connected devices.
- Support the selection and implementation of appropriate cryptographic algorithms and security mechanisms.
- Assist with key management and secure key storage practices.
- Support certificate lifecycle management, including certificate issuance, renewal, and revocation.
- Apply foundational knowledge of cryptographic algorithms, hashing, key lengths, and encryption modes.
- Evaluate and support secure communications between devices, applications, networks, and cloud-connected components.
- Assist with validation of TLS/mTLS configurations and other secure communication mechanisms.
- Support security assessment of relevant medical, proprietary, wireless, or device-specific communication protocols.
- Assist in identifying and addressing security risks associated with cloud-connected products and device backends.
- Support security assessments of APIs, including authentication, authorization, and data protection.
- Apply foundational knowledge of protecting sensitive information in transit and at rest.
- Participate in technical design reviews and security-focused code inspections.
- Provide security recommendations and feedback to software engineers and R&D teams.
- Promote secure coding practices throughout the software development lifecycle.
- Support product security risk assessments, threat modeling, hazard analysis, and vulnerability management activities.
- Assist with vulnerability identification, analysis, prioritization, remediation, and verification.
- Review penetration testing and security assessment results and assist teams in implementing appropriate security controls.
- Work closely with software development teams to address identified security issues.
- Assist development teams with product security framework activities and processes.
- Contribute to security documentation, including:
- Incident and Vulnerability Management Plans
- Product Security White Papers
- Security assessment documentation
- Risk assessment documentation
- Security test reports and supporting artifacts.
- Participate in product security incident response activities as appropriate.
- Assist with investigation, documentation, remediation, and follow-up activities related to product security incidents and vulnerabilities.
- Support the deployment and use of vulnerability scanning and static code analysis tools.
- Where applicable, assist engineering teams in implementing automated security testing.
- Support automated verification of software vulnerabilities and operating system security patches.
- Contribute to configuration and maintenance of security testing tools and processes.
- Support the quality and completeness of R&D security test deliverables.
- Assist with test design, data analysis, reporting, and technical review.
- Help ensure security deliverables comply with applicable regulatory and quality requirements.
- Collaborate with software engineers, firmware engineers, R&D teams, product teams, and other stakeholders.
- Work effectively within an agile software development environment.
- Stay current with emerging product security threats, vulnerabilities, tools, technologies, and industry practices.
- Perform other duties as required.
- Bachelor s degree in computer engineering, Cybersecurity, Computer Science, Software Engineering, or a related technical discipline.
- 2+ years of professional experience in product security, cybersecurity, software development, product development, embedded systems, or software quality assurance.
- Hands-on experience with embedded Linux, Windows Embedded/IoT, or RTOS-based systems.
- Familiarity with C/C++ within an embedded software or security engineering environment.
- Foundational knowledge of information security principles, secure software development, and product security standards.
- Experience working within a structured software development lifecycle, preferably in an Agile/Scrum environment.
- Ability to collaborate effectively with engineering and R&D teams.
- Strong written, verbal, analytical, and problem-solving skills.
- Must be based in or within reasonable commuting distance of the Irvine, California area.
- Master's degree in Cybersecurity, Computer Science, Software Engineering, Computer Engineering, or a related field.
- Experience with embedded or firmware security tools and techniques, including:
- Firmware image analysis
- JTAG/SWD hardware debugging
- Static analysis of C/C++ embedded code
- Experience with product cybersecurity in regulated medical device environments, including familiarity with 510(k) and/or PMA-regulated products.
- Experience with security risk assessments, threat modeling, vulnerability assessments, penetration testing, and security testing.
- Familiarity with threat modeling methodologies such as STRIDE, PASTA, NIST, and OWASP.
- Understanding of applied cryptography, including:
- Encryption algorithms and modes
- Key lengths
- Hashing
- Secure key storage
- Key management
- Familiarity with PKI, including CA hierarchies, certificate lifecycle management, CRL, and OCSP.
- Experience securing network communications, including TLS/mTLS configuration and validation.
- Familiarity with medical, IoT, wireless, or device-specific protocols such as HL7, FHIR, and Bluetooth Low Energy (BLE).
- Foundational understanding of cloud and API security, including authentication, authorization, and protection of sensitive data such as PHI/PII.
- Experience with cybersecurity tools such as:
- Black Duck
- Coverity
- Veracode
- Nessus
- Snyk
- Metasploit
- Experience configuring and using static code analysis and vulnerability scanning tools.
- Experience with connected products, embedded software, firmware, networking technologies, or regulated environments.
- Industry-recognized cybersecurity certifications such as CCNA, CISSP, CISM, GIAC, CCSP, or CEH.
- Embedded Product Security
- Embedded Linux / Windows IoT / RTOS
- C/C++ Security
- Threat Modeling
- Vulnerability Management
- Security Risk Assessment
- Secure Software Development
- Cryptography & PKI
- TLS/mTLS & Secure Communications
- Cloud & API Security
- Static Code Analysis
- Vulnerability Scanning
- Medical Device / Regulated Product Security
- Agile Software Development
- Technical Documentation
- Cross-functional Collaboration
At KAYGEN, people are at the heart of everything we do. We foster a diverse, inclusive, and employee-driven culture where every individual is valued, empowered, and encouraged to bring their authentic self to work. Our candidate-first approach means we are committed to understanding your career goals and connecting you with opportunities that align with your aspirations, skills, and potential. Whether you're taking the next step in your career or searching for your dream opportunity, KAYGEN is more than a staffing partner—we're a community dedicated to helping you grow, succeed, and thrive. Join us and discover a place where your talent is recognized, your ambitions are supported, and your future is built alongside a team that invests in your success every step of the way.
Our team of experienced staffing experts will work with you to find you the best opportunity. For more information, please visit us at www.kaygen.com.
Benefits:
- Free Healthcare Insurance
- 401(k) Retirement Plan
- Free Life Insurance
- Sick Time Off
- Mentorship Program
- Certifications
- Referrals
- Family and Wellness benefits
- Continuous Growth and Career Development
Numbers & Facts
| Location | Irvine, CA |
| Industry | Computer/IT Services |
| Salary | $60–$75 Per Hour |
| Company Size | 100 to 499 employees |
| Year Founded | 2003 |
| Website | http://www.kaygen.com |
Benefits
Paid Sick Days, Professional Development, 401K, Employee Referral Program, Flexible Spending Accounts, Employee Events, Life Insurance, Merchandise Discounts
About Company
Kaygen, an award-winning technology consulting and talent firm, assists organizations to achieve digital transformation. From structuring data to the Cloud and visualization, Kaygen leads the digital transformation of global clients.
Kaygen, from the Japanese word, kaizen, for continuous improvement, signifies how we continuously seek to bring expert tech talent to our client engagements to create a sustainable competitive advantage. However, there is more. Our company is diverse, and minority woman owned and operated by expert data technologists who have conceived and developed the very strategic technology initiatives that we now engage in for our clients with our talent.
Our core belief in diversity, complemented by the principles of kaizen, ensures we bring the best expert data talent to work transparently, collaboratively, and with the flexibility to ensure client success.
Visit http://www.kaygen.com/ for a solutions overview.
.
Skills
- Agile Programming Methodologiesunmatched
- Analysis Skillsunmatched
- Application Programming Interface (API)unmatched
- Authenticationunmatched
- Bill of Materials (BOM)unmatched
- Bluetoothunmatched
- Boundary Scanunmatched
- C Programming Languageunmatched
- C++ Programming Languageunmatched
- CCNA - Cisco Certified Network Associateunmatched
- CCSP - Cisco Certified Security Professionalunmatched
- CISM - Certified Information Security Managerunmatched
- CISSP - Certified Information Systems Security Professionalunmatched
- Career Developmentunmatched
- Certificate Issuanceunmatched
- Cloud Computingunmatched
- Communication Skillsunmatched
- Communications Protocolsunmatched
- Community Supportunmatched
- Computer Engineeringunmatched
- Computer Firmwareunmatched
- Computer Networksunmatched
- Computer Scienceunmatched
- Computer Securityunmatched
- Cross-Functionalunmatched
- Cryptographyunmatched
- Cryptography Algorithmsunmatched
- Data Analysisunmatched
- Documentationunmatched
- Embedded Linuxunmatched
- Embedded Softwareunmatched
- Embedded Systemsunmatched
- Establish Prioritiesunmatched
- Fortune 500 Customersunmatched
- GIAC - Global Information Assurance Certificationunmatched
- HL7 (Health Level 7)unmatched
- Hardware Debuggingunmatched
- Hazard Analysisunmatched
- Health Insuranceunmatched
- Identify Issuesunmatched
- Incident Managementunmatched
- Incident Responseunmatched
- Industry Standardsunmatched
- Information/Data Security (InfoSec)unmatched
- Insurance Regulationsunmatched
- Internet Securityunmatched
- Internet of Thingsunmatched
- Medical Equipmentunmatched
- Mentoringunmatched
- Metasploitunmatched
- Microsoft Windows Operating Systemunmatched
- Nessusunmatched
- Penetration Testingunmatched
- Physical Securityunmatched
- Presentation/Verbal Skillsunmatched
- Problem Solving Skillsunmatched
- Product Developmentunmatched
- Product Documentationunmatched
- Product Engineeringunmatched
- Product Lifecycleunmatched
- Product Supportunmatched
- Public Key Infrastructure (PKI)unmatched
- Quality Assuranceunmatched
- Quality Assurance Methodologyunmatched
- Realtime Operating Systemunmatched
- Regulationsunmatched
- Regulatory Complianceunmatched
- Regulatory Requirementsunmatched
- Research & Development (R&D)unmatched
- Risk Analysisunmatched
- Risk Managementunmatched
- SSL-TLS (Secure Socket Layer - Transport Layer Security)unmatched
- Scrum Project Management and Software Developmentunmatched
- Security Analysisunmatched
- Security Attacksunmatched
- Security Designunmatched
- Security Patchesunmatched
- Software Administrationunmatched
- Software Developmentunmatched
- Software Development Lifecycle (SDLC)unmatched
- Software Engineeringunmatched
- Software Patchesunmatched
- Software Testingunmatched
- Startupunmatched
- Static Analysisunmatched
- Team Lead/Managerunmatched
- Team Playerunmatched
- Technical Supportunmatched
- Technical Writingunmatched
- Technical/Engineering Designunmatched
- Test Automationunmatched
- Test Designunmatched
- Test Toolsunmatched
- Testingunmatched
- Threat Modelingunmatched
- Threat and risk analysis (TRA)unmatched
- U.S. National Institute of Standards and Technology (NIST)unmatched
- Vulnerability Scannersunmatched
- White Papersunmatched
- Wireless Communicationsunmatched
- Writing Skillsunmatched
Level up your application
Professional resume templates
Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.
Free resume templatesFree resume builder
Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.
Free resume builder