Home
Jobs

Staff Product Security Analyst

3 - 4 years

17 - 19 Lacs

Posted:23 hours ago| Platform: Naukri logo

Apply

Work Mode

Work from Office

Job Type

Full Time

Job Description

The Product Security Engineer is a product team s cybersecurity focal point for secure product development and maintenance of released product. The Product Security Engineer is an experienced member of the product engineering team with influence to drive product privacy and cybersecurity features and enhancements. The Product Security Engineer must have deep product knowledge to ensure the clinical functionality, expected operating environment, and interoperability to accurately determine a product s privacy and security risks..

 

Essential Responsibilities:

GE Healthcare have devised a Design Engineering Privacy and Security Procedure to ensure compliance to the special cybersecurity needs of the Healthcare industry across the continuum of the Secure Development Life Cycle.
 
Roles and Responsibilities :
1. Provide privacy and security technical expertise in support of the product team throughout product development, design change, and life-cycle management.
2. Work with the Product Security Leader (PSL) to support the product team with process expertise for the GE HealthCare-GEHC Product Cybersecurity Standard and life-cycle management.
3. Product cybersecurity development responsibilities:
  • Assess the privacy and cybersecurity state of the product and define product roadmap features/enhancements with stakeholder approval
  • Responsible for security architecture and coordination of product development for cybersecurity features and enhancements
  • Assess product components and SBoM integrated into the product
  • Perform defect management for cybersecurity issues
  • Identify operational responsibilities and adherence to cloud standards for cloud- based products
  • Responsible for Product and Security Manual and MDS2 documentation
4. In coordination with the PSL, own and deliver GEHC Product Cybersecurity Standard artifacts, which includes:
  • Design input activities to identify, evaluate, roadmap, and drive cybersecurity and privacy features and enhancements within product development programs
  • Create Design Engineering Privacy and Security (DEPS) artifacts for privacy and security risk assessments to engage in domain-specific product threat modeling, attack surface analysis, risk management and reduction
  • Coordinates with the PSL to support the product team in scheduling and performing vulnerability scans and cybersecurity assessments
  • Lead product Security Technical Design Reviews
  • Along with the product LSD, responsible for the GEHC Product Cybersecurity Standard compliance and other pertinent standards and process.
5. Stay current on healthcare privacy trends and regulatory environment (i.e. FDA, HIPAA, GDPR, etc ) to effectively communicate privacy awareness with the product team.
6. Works with the GEHC Product Security team and QARA on released product life-cycle, including:
  • Participate in post-market product vulnerability monitoring
  • Participate as an Subject Matter Expertise to determine product vulnerability impact, investigation, and risk assessment.
  • Responsible for product vulnerability mitigation and design change.
  • Responsible for GEHC vulnerability tool update to ensure accurate customer communication.
7. Address customer and Sales RFP privacy and security feedback/questions.
8. Provide technical expertise on customer concerns, complaints, and CSO escalations.
9. Create/Maintain responsible product records within GEHC product cybersecurity tools.
10. Active involvement in DoD RMF submission process and maintenance.
 
Educational Qualifications:
  • Bachelors Degree in a relevant field (e.g. Computer Engineering, Computer Science, Information Security) or in a STEM major (Science, Technology, Engineering, or Math)
  • 3+ years of progressive experience as a development/cybersecurity engineer or scientist/researcher working with a cybersecurity skill set.
Desired Characteristics:
  • Sound technical and domain experience in at least two cybersecurity functional technology areas.
  • Technical assessment (system/web application vulnerability assessment, penetration testing, white-box code analysis, etc.) and security architecture (design of security controls, secure system design, understanding of identity and authentication management, etc.).

Mock Interview

Practice Video Interview with JobPe AI

Start Job-Specific Interview
cta

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.

Job Application AI Bot

Job Application AI Bot

Apply to 20+ Portals in one click

Download Now

Download the Mobile App

Instantly access job listings, apply easily, and track applications.

coding practice

Enhance Your Skills

Practice coding challenges to boost your skills

Start Practicing Now

RecommendedJobs for You

Kolkata, Mumbai, New Delhi, Hyderabad, Pune, Chennai, Bengaluru

Kolkata, Mumbai, New Delhi, Hyderabad, Pune, Chennai, Bengaluru