Product security operations threat specialist / associate expert of r&d product cybersecurity, global

Education

BS, Master or equivalent degree in Computer Engineering, Software Engineering, Cybersecurity or other related fields

Experience

Minimum of 5 years of professional experience within Information Technology, Software Development or related field.

Minimum of 3 years of working knowledge and understanding of security engineering, system and network security, authentication and application security. Including multiple combinations of the following :

Threat Analysis and Risk Assessment activities in product development

Software development processes and secure coding

Developing security procedures and product security specifications

Vulnerability / penetration testing

Familiarity with vulnerability Management activities and processes (a plus point)

Skills :

General knowledge of medical device standards, security standards and test methods.

Strong Analytical and problem-solving skills

Ability to express ideas clearly both in written and oral communications.

Ability to analyze technical requirements and develop well-structured solutions

Ability to transform requirements in a consistent, abstract representation into a given tool environment

Other Considerations (travel / hours availability, etc.) :

Because of global team setup with members and development centers

Roles and Responsibilities :

As product security operations threat specialist / associate expert the main tasks will be as following :

Administrate instance of vulnerability monitoring tool including

User management, add / remove users

Install security updates

Ensure connectivity to vulnerability databases like NVD

Data integrity (completeness, updated records)

React to alerts of detected vulnerabilities and ensure the proper assignment

Support regional development teams with the creation and import of SBOMS

Create monthly reports and statistics of detected vulnerabilities

Support coordination activities for DCs in case of vulnerabilities which affects more than one product

Regular communication with all DCs regarding vulnerability monitoring activities