Address
Form of workBenefits:
Job Title: Sr Product Security Engineer- Medical Industry
Location: Location: Lake Forest, CA
Duration: 12 months
Sr Product Security Engineer
What you will be doing:
•Work directly with embedded software developers in building a security by
design mindset by defining implementations and coding inline with the
Application Security Program mandates
•Implement embedded secure code solutions, design patterns, and coding
guidelines that meet security and privacy requirements defined in the
security plans, risk assessments, policies, and procedures
•Support security project governance through scheduling activities, planning
and prioritization
•Proactively drive security solutions implementation in-alignment with the
development leads, security architects and product owner(s)
•Drive feature implementations in line with the architecture via designs,
coding, reviews and tests. Perform Proof of Concept (POC) activities as
necessary
•Review, Analyze and mitigate SAST, DAST, SCA and penetration test findings
in collaboration with the developers for various electromechanical medical
devices product lifecycles
•Review current software security control measures and implement security
enhancements across multiple medical devices
•Participate in post-market product analysis to support vulnerability
investigations as required as well as be engaged in continuous security
monitoring
•Work collaboratively with product teams on annual SOC2 and HiTrust audits
for products
What you will bring:
•Experienced security developer able to interpret and guide medical device
software development teams on secure coding practices and application
security test report interpretation for various coding languages and
operating environments
•Strong knowledge of secure software development lifecycle and practices
including SAFe/ Agile methodologies for software development
•Understanding of security by design principles and architecture level
security concepts
•Sound understanding and experience in implementing security
technologies/techniques such as, Cryptographic Algorithms/Cipher Suites,
Public key Infrastructure (PKI), Hardware/embedded authentication
protocols, Secure Boot, and data-at-rest encryption methods
•Experience implementing OWASP Top10 application security guidelines in
embedded systems
•Knowledge of embedded system architecture and security controls (e.g.,
firewall and border router configurations, wireless communication
architectures, messaging authentication protocols
•Experienced in generating, defining, and reviewing penetration test results
through knowledge standard methodologies and tools including
environmental configuration definition, security analysis, threat modeling,
and system security audits
•Expertise in designing secure networks, systems, and application
architectures
•Knowledge of current and emerging security threats and techniques for
exploiting security vulnerabilities
•Proficiency with industry standards and guidance such as IEC TR 80001, NIST
800-53, ISO IEC 27001 & 27002, etc.
•Exposure to international privacy requirements & cross-industry trends
•Certification in security such as CAP, CSSLP, or equivalent desired but not
required.
Qualifications and Skills
•Bachelor's degree in Computer Science, Computer Engineering, a related
field or equivalent demonstrated experience and knowledge
•Minimum 8+ years of experience in software development or related fields.
•Minimum 5 years technical experience working with Product Security
design/development for embedded systems
•3 years working with each of the following:
•Experience with C/C++, Python, Linux and/or security design within
real-time operating systems
•Experience analyzing, interpreting, and mitigating security findings
from multiple sources including SAST, DAST, SCA and penetration
tests
•Embedded data at rest security implementations including Code
Signing, Secure boot, and flash encryption implementations
•Embedded/IoT wired and wireless secure networking
implementations within multiple layers of the OSI stack
•IoT/Embedded PKI solutions and implementation.
Compensation: $90,000.00 - $100,000.00 per year
MAKING THE INDUSTRY'S BEST MATCHES
DBSI Services is widely recognized as one of the industry's fastest growing staffing agencies. Thanks to our longstanding experience in various industries, we have the capacity to build meaningful, long-lasting relationships with all our clients. Our success is a result of our commitment to the best people, the best solutions and the best results.
Our Story:
Top performing engineers are the foundation of our business. Our priority is building strong
relationships with each employment candidate we work with. You can trust our professional
recruiters to invest the time required to fully understand your skills, explore your professional
goals and help you find the right career opportunities.
- 401(k)
- 401(k) matching
- Relocation bonus
Job Title: Sr Product Security Engineer- Medical Industry
Location: Location: Lake Forest, CA
Duration: 12 months
Sr Product Security Engineer
What you will be doing:
•Work directly with embedded software developers in building a security by
design mindset by defining implementations and coding inline with the
Application Security Program mandates
•Implement embedded secure code solutions, design patterns, and coding
guidelines that meet security and privacy requirements defined in the
security plans, risk assessments, policies, and procedures
•Support security project governance through scheduling activities, planning
and prioritization
•Proactively drive security solutions implementation in-alignment with the
development leads, security architects and product owner(s)
•Drive feature implementations in line with the architecture via designs,
coding, reviews and tests. Perform Proof of Concept (POC) activities as
necessary
•Review, Analyze and mitigate SAST, DAST, SCA and penetration test findings
in collaboration with the developers for various electromechanical medical
devices product lifecycles
•Review current software security control measures and implement security
enhancements across multiple medical devices
•Participate in post-market product analysis to support vulnerability
investigations as required as well as be engaged in continuous security
monitoring
•Work collaboratively with product teams on annual SOC2 and HiTrust audits
for products
What you will bring:
•Experienced security developer able to interpret and guide medical device
software development teams on secure coding practices and application
security test report interpretation for various coding languages and
operating environments
•Strong knowledge of secure software development lifecycle and practices
including SAFe/ Agile methodologies for software development
•Understanding of security by design principles and architecture level
security concepts
•Sound understanding and experience in implementing security
technologies/techniques such as, Cryptographic Algorithms/Cipher Suites,
Public key Infrastructure (PKI), Hardware/embedded authentication
protocols, Secure Boot, and data-at-rest encryption methods
•Experience implementing OWASP Top10 application security guidelines in
embedded systems
•Knowledge of embedded system architecture and security controls (e.g.,
firewall and border router configurations, wireless communication
architectures, messaging authentication protocols
•Experienced in generating, defining, and reviewing penetration test results
through knowledge standard methodologies and tools including
environmental configuration definition, security analysis, threat modeling,
and system security audits
•Expertise in designing secure networks, systems, and application
architectures
•Knowledge of current and emerging security threats and techniques for
exploiting security vulnerabilities
•Proficiency with industry standards and guidance such as IEC TR 80001, NIST
800-53, ISO IEC 27001 & 27002, etc.
•Exposure to international privacy requirements & cross-industry trends
•Certification in security such as CAP, CSSLP, or equivalent desired but not
required.
Qualifications and Skills
•Bachelor's degree in Computer Science, Computer Engineering, a related
field or equivalent demonstrated experience and knowledge
•Minimum 8+ years of experience in software development or related fields.
•Minimum 5 years technical experience working with Product Security
design/development for embedded systems
•3 years working with each of the following:
•Experience with C/C++, Python, Linux and/or security design within
real-time operating systems
•Experience analyzing, interpreting, and mitigating security findings
from multiple sources including SAST, DAST, SCA and penetration
tests
•Embedded data at rest security implementations including Code
Signing, Secure boot, and flash encryption implementations
•Embedded/IoT wired and wireless secure networking
implementations within multiple layers of the OSI stack
•IoT/Embedded PKI solutions and implementation.
Compensation: $90,000.00 - $100,000.00 per year
MAKING THE INDUSTRY'S BEST MATCHES
DBSI Services is widely recognized as one of the industry's fastest growing staffing agencies. Thanks to our longstanding experience in various industries, we have the capacity to build meaningful, long-lasting relationships with all our clients. Our success is a result of our commitment to the best people, the best solutions and the best results.
Our Story:
- Founded in 1995
- Privately Owned Corporation
- Managing Partner Business Model
- Headquartered in New Jersey
- US Based Engineers Only
- Collaborative Team Approach
- Methodology and Process Driven
Top performing engineers are the foundation of our business. Our priority is building strong
relationships with each employment candidate we work with. You can trust our professional
recruiters to invest the time required to fully understand your skills, explore your professional
goals and help you find the right career opportunities.
