Principal Cybersecurity Engineer
Core
Drive cybersecurity strategy and DevSecOps throughout the product lifecycle for medical devices, ensuring compliance with regulations.
Role type
Principal Cybersecurity Engineer (Product Security & DevSecOps)
Builds
Secure medical device products and CI/CD pipelines
Domain
Medical Devices / Healthcare / Cybersecurity
Required skills
DevSecOps, threat modeling (STRIDE), security risk assessments, secure coding, vulnerability detection, secrets management, identity and access management, regulatory compliance (FDA/TIR 57), NIST frameworks, embedded systems security
Preferred skills
IoT cloud security, architecture reviews for complex devices, security champion leadership
Technologies
DevSecOps tools, CI/CD pipelines, NIST Cybersecurity Framework
Responsibilities
Integrate security into the product development lifecycle; foster a collaborative security culture; collaborate with product teams to embed security controls in CI/CD; lead threat modeling and risk assessments; define product security requirements and verification strategies; automate vulnerability detection and patching; implement risk mitigation strategies; oversee incident response plans; manage secrets and IAM; stay current with medical device security regulations; collaborate with internal stakeholders; model resiliency and lead security champions.
Seniority
Principal, strategy & mentorship