Sr. Product Security Engineer
Core
Own the end-to-end vulnerability management lifecycle for Novanta's medical device portfolio, including monitoring, analysis, triage, risk evaluation, reporting, and customer communication.
Role type
Senior Product Security Engineer (Vulnerability Management)
Builds
Vulnerability management processes, risk assessments, and regulatory compliance reports for medical devices
Domain
Medical device cybersecurity / Healthcare
Required skills
Vulnerability management, CVE/NVD/CISA KEV monitoring, SBOM analysis, risk assessment, CVSS evaluation, regulatory reporting, process governance, automation, stakeholder communication
Preferred skills
Medical device industry experience, IEC 81001-5-1, IEC 62304, ISO 14971, EU MDR, FDA cybersecurity expectations, EU Cyber Resilience Act knowledge, cybersecurity certifications
Technologies
CVE, NVD, CISA KEV, SBOM, SCA, vulnerability management tools
Responsibilities
Monitor CVE/NVD/CISA advisories and vendor alerts; Perform vulnerability triage, prioritization, and CVSS scoring; Conduct threat modeling and risk assessments; Communicate vulnerability impact and remediation plans to customers; Maintain vulnerability reporting frameworks and workflows; Automate vulnerability intake and reporting processes
Seniority
Senior, hands-on IC
