Role :
Product Security Engineer
Location : REMOTE
Duration :
6 month contract to likely hire or ongoing contract extensions
Location : REMOTE
Required Skills & Experience :
- 5 years’ experience in Software Security
- MUST HAVE EXPERIENCE WITH “PRE MARKET” SECURITY TESTING ON HARDWARE OR SOFTWARE
- Expertise in threat modelling, security risk management, secure coding, secure system development, and DevSecOps
- Strong experience with Polaris, BlackDuck, Synk, or similar
- Experience with security techniques, standards, and methods for authentication and authorization, applied cryptography, security vulnerabilities, and remediation in Windows .NET and Azure environments.
Job Description :
We are seeking a Product Security Engineer to work with one of our Large Medical Device Clients. The Product Security Engineering Contractor will assist with product security tasks, deliverables, and support for the product security and systems engineering teams. This role requires technical expertise, knowledge of safety-critical systems, and the ability to work in a team environment to ensure the security and resilience of our current and developing digital products. Responsibilities :
Understand and adhere to Quality Management System requirementsContribute to the development / maintenance of threat models, product security risk documentation, and other QMS deliverablesIdentify and consult on requirements to help address and mitigate security risks and vulnerabilities.Serve as subject matter expert to the development teams, be security-minded, and raise the level of understanding and compliance.Leverage tools like Polaris (Blackduck) to perform and triage SAST, DAST, and SCA scans.Collaborate with the team on the security testing and security signalsSupport compliance with regulatory requirements, industry standards, and internal policies governing product security.Stay informed about new tools, regulations, standards, and best practices of the industry.