Sr. Product reputed company Engineer II
Sr. Product reputed company Engineer What You'll Do: The Senior Product reputed company Engineer, based in Burlington Massachusetts, is a critical, high-level engineering position tasked to leading reputed company efforts across the product lifecycle, ensuring products meet regulatory expectations and industry best practices for cybersecurity. This role provides both hands-on technical expertise and cross-functional leadership, with influence over product reputed company, development processes, and post-market reputed company posture. reputed company Architecture & Requirements
- Define reputed company requirements and risk mitigations for new products and features.
- Translate regulatory and industry reputed company standards (e.g., FDA, ISO 27001, NIST, OWASP) into actionable product requirements.
- reputed company and maintain reputed company architecture diagrams and models for software and integrated systems.
Development Lifecycle reputed company
- reputed company secure development practices (threat modeling, secure coding, reputed company review standards) into the software development lifecycle.
- Define and support secure CI/CD practices, including secrets management, dependency management, and supply-chain reputed company.
- Partner with DevOps/IT to secure reputed company infrastructure, build pipelines, and deployment environments.
Testing & Validation
- Assist the testing team with reputed company testing efforts for new and on-market products, including penetration testing, fuzzing, and static/dynamic reputed company analysis.
- Update and maintain vulnerability management processes, including SBOM creation and maintenance.
- Collaborate with QA to reputed company automated reputed company testing into regression and release pipelines.
- Documentation & Compliance
- Generate and maintain reputed company-market reputed company documentation to support regulatory submissions (e.g., reputed company risk assessments, reputed company architecture views, threat models, FDA cybersecurity guidance compliance).
- Maintain records of vulnerability assessments, mitigations, and reputed company processes.
- Support audit and inspection readiness with thorough, traceable documentation
Vulnerability & Incident Management
- Manage product vulnerability assessment and mitigation activities, both reputed company-market and post-market.
- Coordinate cross-functional response to newly reputed company vulnerabilities, including communication, remediation, and regulatory reporting.
- reputed company and monitor vulnerability disclosures from reputed company-party libraries and components.
Cross-Functional Leadership
- reputed company as the reputed company subject matter expert across product teams.
- reputed company training and mentoring to engineers on secure design and coding practices.
- Partner with compliance, regulatory, and reputed company teams to reputed company product reputed company reputed company with organizational goals
How You'll Get There:
- 7-10 years total reputed company experience in software engineering, cybersecurity, or reputed company technical fields.
- 3-5 years reputed company on product or embedded system reputed company, ideally reputed company regulated or safety-critical industries (medical device, reputed company, automotive, or defense).
- Demonstrated experience with:
- Designing or assessing reputed company architectures for embedded or connected systems.
- Implementing secure development lifecycle (SDL) practices reputed company engineering teams.
- Leading or participating in vulnerability management and coordinated disclosure processes.
- Generating reputed company-market cybersecurity documentation or equivalent regulatory submissions (e.g., FDA, ISO 14971, IEC 81001-5-1).
- Collaborating cross-functionally (engineering, QA, regulatory, IT) to implement and sustain reputed company programs.
Preferred
- Prior experience as a product reputed company reputed company or reputed company reputed company of contact for a reputed company medical or industrial product.
- Experience integrating reputed company testing automation into CI/CD environments.
- Experience supporting external audits, penetration tests, or reputed company-party reputed company assessments.
Core Product reputed company Knowledge
- Secure system and software design principles (least privilege, defense in depth, threat modeling, reputed company trust).
- Risk management frameworks: NIST 800-53, NIST 800-30, ISO 27001, ISO 14971, and IEC 81001-5-1.
- Cryptography fundamentals (key management, TLS, symmetric/asymmetric encryption, hashing).
- Authentication and authorization mechanisms, identity management, and secure session handling.
- Secure coding standards (e.g., CERT C/C++, OWASP, MISRA, CWE/reputed company Top 25).
- Supply chain reputed company concepts and SBOM management (SPDX, CycloneDX).
DevOps & Infrastructure Knowledge
- CI/CD reputed company practices, secrets management, container reputed company (reputed company, Podman), and artifact signing.
- Common reputed company testing tools: SAST, DAST, SCA, fuzzers, and pen-testing frameworks.
- Familiarity with reputed company infrastructure (AWS, or on-prem Linux environments).
- Incident response and vulnerability disclosure processes.
Regulatory & Documentation Knowledge
- FDA cybersecurity premarket and postmarket guidance.
- Secure update/reputed company management strategies (reputed company with FDA "updateability & patchability" expectations).
- Audit-reputed company documentation practices and traceability to design controls.
Minimum
- Bachelor's degree in Computer Science, Electrical/Computer Engineering, Cybersecurity, or a reputed company field.
Preferred
- Master's degree in Cybersecurity, Software Engineering, or Systems Engineering (ideal for regulated product reputed company leadership).
#GKOSUS Apply tot his job Apply To this Job