Principal Product Security Engineer
Core
Own the cybersecurity of the CathWorks platform medical device (OS, clinical applications, hardened environment, UI shell) from design through post-market, serving as the technical authority for security across the product lifecycle.
Role type
Principal Product Security Engineer (Medical Device)
Builds
CathWorks FFRangio® System (AI-driven computational science for angiograms)
Domain
Healthcare technology / Medical devices / Cybersecurity
Deliverable
production ML models
Required skills
Windows security hardening, threat modeling, secure SDLC (SAST/DAST/SCA), SBOM management, cryptography/PKI/TLS, vulnerability management, regulatory documentation
Preferred skills
Regulated medical device development (IEC 62304/ISO 14971/ISO 13485), FDA cybersecurity submissions, medical imaging protocols (DICOM/PACS/HL7/FHIR), reverse engineering/exploit analysis, professional certifications (CISSP/CSSLP/GIAC/GXPN/OSCP)
Technologies
Windows, WDAC, AppLocker, BitLocker, Group Policy, C#, .NET, C++, Win32
Responsibilities
Lead product threat modeling and maintain cybersecurity architecture; Define security requirements and conduct design reviews; Establish secure Windows platform configurations; Integrate cybersecurity into SDLC via secure coding and testing; Manage SBOM and third-party component inventories; Execute cybersecurity verification (penetration testing, fuzz testing); Prepare regulatory cybersecurity documentation; Lead post-market cybersecurity activities (vulnerability triage, incident response)
Seniority
Principal, hands-on IC with strategy & mentorship
