Product Security Engineer Medical Devices

Immediate need for a talented Product Security Engineer – Medical Devices. This is a 06+ Months Contract opportunity with long-term potential and is located in US (Remote). Please review the job description below and contact me ASAP if you are interested.

Job ID:26-24425

Pay Range: $70/hr - $80/hr with flex. Employee benefits include, but are not limited to, health insurance (medical, dental, vision).
 
Key Responsibilities:

• Job Description:- The Product Security Engineer will support the security architecture, design review, and risk management activities for medical devices and Software as a Medical Device (SaMD) platforms. 
• This role focuses on ensuring the security, privacy, and regulatory compliance of medical devices.
• The candidate will work cross-functionally with engineering, quality, regulatory, and DevOps teams to implement secure design practices. Large portion of this job requires performing threat modeling, and support cybersecurity risk management activities aligned with FDA guidance. 
• This position contributes to security documentation supporting 510(k) submissions, post market cybersecurity management, and secure development lifecycle (SDL) activities.
• Perform product security risk assessments and threat modeling for medical devices and SaMD platforms.
• Support cybersecurity documentation for FDA regulatory submissions including 510(k), cybersecurity risk management files, and SBOM requirements.
• Conduct security architecture reviews for medical platforms.
• Evaluate system designs against secure architecture principles, regulatory expectations, and cybersecurity frameworks.
• Develop and maintain Product Security Risk Management Plans, Vulnerability Management Plans, and Incident Response Plans.
• Participate in secure software development lifecycle (SSDLC) activities including design reviews and security validation.
• Analyze results of static code analysis, dynamic analysis, and vulnerability scanning tools.
• Support SBOM generation and third party software risk analysis.
• Assist in investigation and remediation of security vulnerabilities affecting medical device or cloud infrastructure environments.
• Collaborate with DevOps and engineering teams to implement secure configurations, identity management, and network security controls.
• Participate in product security incident response activities and post-market cybersecurity monitoring.
• Support internal and external security audits related to FDA, ISO 13485, ISO 27001, TIR-57 and healthcare cybersecurity requirements.

Key Requirements and Technology Experience:

• Requires a BS degree preferably Cybersecurity, Computer Science, Computer Engineering, a related Engineering discipline and 5+ years' experience in cybersecurity, product security, or cloud security roles.
• Experience supporting FDA cybersecurity documentation or 510(k) submissions strongly preferred.
• Experience working with regulated medical devices or healthcare software environments
• Strong written and verbal communication skills.
• Strong analytical thinking and attention to detail.
• Experience working in cross functional engineering environments.
• Familiarity with Threat Modeling, vulnerability scanning and remediation processes.
• Experience reviewing technical documentation and regulatory artifacts.
• Knowledge of NIST Cybersecurity Framework and NIST 800-series security controls.
• Familiarity with OWASP Top 10 and secure software development lifecycle practices.

Our client is a leading Medical Device Industry and we are currently interviewing to fill this and other similar contract positions. If you are interested in this position, please apply online for immediate consideration.
 
Pyramid Consulting, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

By applying to our jobs you agree to receive calls, AI-generated calls, text messages, or emails from Pyramid Consulting, Inc. and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy here.