Product Security Engineer / Threat Analyst

Job Description Summary

We are seeking a talented Product Security and Threat Analyst Engineer to join our Post-Market Vulnerability Team. You will be at the forefront of our product security cybersecurity defense. This role will focus on identifying, analyzing, and mitigating cyber threats and vulnerabilities affecting BD's medical products. The successful candidate will collaborate with cross-functional teams to ensure products meet the highest standards of security and regulatory compliance, while proactively improving threat detection and response capabilities. You will play a crucial role in securing our extensive range of medical devices and systems against cyber threats. You will be responsible for monitoring, analyzing, and responding to incoming security threats, conducting in-depth research on emerging cyber threats, vulnerabilities, and attack vectors. You will evaluate product impact and reassess threats based on product security factors. You will be required to use your deep understanding of threat research to document possible threats and their impact to BD products.

The primary work will involve vulnerability assessments, which includes threat research and analysis, potential impact, exploitability. Assessments will involve product and code analysis to determine the exploitability of vulnerability, as well as assessing safety risk, severity and likelihood.

Job Description

Responsibilities :

• Develop and implement strategies to identify, analyze, and mitigate cyber threats targeting BD products.
• Enhance threat hunting activities to detect and respond proactively to potential security risks.
• Conduct in-depth threat research on vulnerabilities, attack vectors, and possible impacts.
• Develop and maintain artefacts required for ATO submissions, including vulnerability scans, System Security Plans (SSPs), and Risk Assessment Reports
• Determine and document likelihood of exploitability and potential safety risks for potentially impacted products.
• Calculate residual risk for vulnerabilities by considering compensating controls, mitigations, and operational environments.
• Document all threat research and vulnerability assessments in clear, concise, and actionable reports.
• Work with BD public relations teams, providing accurate and timely information on threat status, impact, and analysis for product leadership and customers.
• Partner with product security officers and cross-functional teams to define threat impacts, implement mitigations, and coordinate responses.
• Support the preparation of regular threat intelligence reports and briefings to senior management and stakeholders.
• Continuously enhance threat intelligence processes, tools, and technologies.
• Stay up to date with the latest cybersecurity trends, vulnerabilities, and emerging threats.
• May perform other duties as required.

Qualifications :

Required Skills

Optional Skills

Primary Work Location

IND Bengaluru - Technology Campus

Additional Locations

Work Shift

Show more

Show less

Skills Required

DAST, .NET Framework, Gdpr, C, Go, Javascript, Iso 27001, Threat Hunting, SAST, Php, Ruby, Authentication, Python, Vulnerability Scanning, Cryptography, secure coding , SCA, Linux, Swift, Ms Windows