Principal Cybersecurity Engineer
Core
Sr. Principal Engineer leading product cybersecurity for medical device software and connected technology platforms, ensuring secure development, compliance, and risk management.
Role type
Senior IC Principal Cybersecurity Engineer (Medical Devices)
Builds
Secure medical device software, connected technology platforms, and DevSecOps pipelines
Domain
Medical devices, regulated software, cybersecurity
Required skills
Security architecture, threat modeling, DevSecOps, vulnerability management, regulatory compliance (FDA/IEC/ISO), secure SDLC, penetration testing, SAST/DAST/SCA, SBOM governance, cloud security, embedded systems security
Preferred skills
FDA submission support, regulatory audits, secure coding remediation, process efficiency improvement
Technologies
STRIDE, attack trees, SBOM, CI/CD pipelines, SAST, DAST, SCA, cloud platforms, containerized workloads, APIs
Responsibilities
Guide conceptualization of secure methodologies and process improvements; develop and implement cybersecure solutions for complex software; analyze, design, and document security for medical product design controls; lead secure design reviews and architecture decisions; perform security testing and vulnerability investigations; develop threat models and maintain security SOPs; support Secure SDLC and DevSecOps implementation; mentor engineering teams and provide technical direction.
Seniority
Senior, hands-on IC with mentorship responsibilities