Massil Technologies - Product Cyber Security Engineer

Job Description :

• Providing privacy and security technical expertise supporting the product team throughout product development, design change, and life-cycle management.
• Work with the Product Security Leader (PSL) to support the product team with process expertise for Healthcare Product Cybersecurity Standards and life-cycle management.

Product cybersecurity development responsibilities :

In coordination with the PSL, own and deliver Product Cybersecurity Standard artefacts, which include :

1. Participate in post-market product vulnerability monitoring.

2. Participate as a Subject Matter Expert to determine product vulnerability impact, investigation, and risk assessment.

1. Globally recognised Cyber Security Certifications (Advanced / Expert Level)

2. Firm with knowledge of OWASP, CVSS, FIPS 140-2 / 140-3 and DoD RMF

3. 7+ years of full-time information security with emphasis on technical assessment (system / web application vulnerability assessment, penetration testing, white-box secure code analysis, etc.) and security architecture (design of security controls, secure system design, understanding of identity and authentication management, etc.)

4. The Candidate shall be capable of finding risks / issues and suggesting the best route to remediation, knowing the compensatory controls & guiding the product team for its closure.

5. Sound understanding of security technologies / techniques like Cryptography, Algorithms, Public key Infrastructure (PKI) Certificate Authority (CA), Hardware / embedded authentication, OAuth, 2-factor authentication, and white-box code analysis.

6. Experience with a range of security tools related to SAST (Static Application Security Assessment), DAST (Dynamic Application Security Assessment), Vulnerability Management, SCA (Software Composition Analysis), Penetration Testing - Web Applications, Thick Clients, Mobile Applications, REST / SOAP Threat Modelling Tools etc.

ref : hirist.tech)