Product Security Engineer - IoT/Network

As a Product Security Engineer - IoT/Network, you will collaborate closely with the team to support the secure design, development, assessment, and monitoring of SSI products that comply with medical device regulatory requirements and adhere to standards for security and resiliency. Responsibilities: - Drives the development, implementation, and sustainment of product security and resiliency throughout the lifecycle. - Develops and enhances system requirements and architectures for product security to meet all applicable certification and customer requirements. - Develops and documents the cybersecurity threat model and risk assessment for embedded and cloud-based products. - Evaluates existing security measures and conducts necessary tests and research to identify additional security measures. - Participates in both in-house and third-party penetration testing activities. - Collaborates closely with software, hardware, and network engineers to design secure communication protocols for surgical robotics. - Supports coordination with stakeholders, regulators, suppliers, and industry partners to identify risks and improve security standards and requirements. - Supports research and development activities resulting in innovative, scalable security solutions. - Collaborates with incident response and security operations team to identify, analyze, and mitigate potential risks. Qualifications: - At least 5 years of relevant experience in product security or cybersecurity with a bachelor's degree. - CISSP or equivalent certifications like SANS, CEH, AWS Security, or Cisco Security. - Advanced knowledge of system security domains. - Experience in cyber security frameworks and compliance standards such as NIST and ISO. - Proficiency in functional and security-centric analysis of C/C++ and Python code. - Excellent analytical skills and communication skills. - Experience working in a distributed environment and project management skills. Preferred Skills and Experience: - Medical device or other regulated domain experience. - Familiarity with FDA Premarket and Postmarket Cybersecurity guidance. - Experience with regulatory aspects of 510(k) cybersecurity submissions. - Experience working with IoT or ICS/SCADA systems.,