We are looking for a Senior Cybersecurity Engineer to embed security throughout our product lifecycle. You will design, build, automate and maintain the secure deployment and monitoring of our products, in a regulated medical device environment.
Requirements
- 5+ years of experience in cybersecurity, with at least 3–5 years in a hands-on senior or lead role.
- Experience in a regulated industry, with a strong preference for MedTech (medical devices), HealthTech, or Life Sciences.
- FDA expertise: Hands-on experience with FDA cybersecurity guidance for medical devices, contributing to the cybersecurity sections of regulatory submissions (e.g., 510(k), PMA), and acting as a subject matter expert in direct interactions with regulatory bodies (e.g., responding to submission questions, participating in audits).
- Compliance expertise: Direct experience leading or playing a primary role in achieving and maintaining SOC 2 and/or HIPAA compliance.
- Product security: Strong experience with application security, secure SDLC practices, threat modeling (e.g., STRIDE), and vulnerability management for software products.
- Cloud security: Deep knowledge of securing cloud environments and services (AWS, GCP, or Azure).
- Technical skills: Proficiency with security assessment tools, IAM systems, endpoint protection, and network security concepts.
- Bachelor’s degree in Computer Science, Information Security, or a related field.
- Relevant professional certifications are highly desirable (e.g., CISSP, CISM, HCISPP, CSSLP)
Benefits
- Health insurance
- Dental insurance
- Vision insurance
- 401(k) matching
- Generous Paid Time Off
- Relocation Assistance
- Flexible work hours