Overslaan en naar de inhoud gaan

Lead Product Security Engineer

00068697581

Job Title - Lead Product Security Engineer
Location - 2/3 days a week from - Raritan, NJ
Skill matrix:


Mandatory Skills
(Top 5 Keywords or skills)
Skill Proficiency
Years of Experience
Basic Knowledge
Medium
Expert
Product Security
5+
Y
Penetration Testing
5+
Y
C/C++, C#, Python
5+
Y
Job Description:
We are searching for top talent for Lead Product Security Engineer. The preferred locations for this role are San Jose, California; Cincinnati, Ohio; and Raritan, New Jersey. Remote opportunities in the US are available on a case by case basis and if approved by the company. This role may require up to 10 - 20% travel.
The Lead Medical Device Cybersecurity Engineer will be responsible for implementation of the customer's enterprise Product Security strategy and framework for the customer's MedTech Surgery Ottava Robotic Platform. This includes identifying key strategy and goals, collaborating with internal organizations on existing process and policy enhancements, creating and communicating metrics to Ottava management, identifying communications plans and raising overall awareness of the capability.
Specific responsibilities include supporting Ottava’s R&D throughout a new product’s development phases, review product security requirements and recommend security design solutions, ensure the team completes Quality documentation, threat modelling, security risk assessment, penetration testing, software architecture review and design recommendations, code analysis and other security testing or work as needed.
Additionally, post market responsibilities for Ottava’s surgical robotic platform marketed devices include monitoring for new vulnerabilities, leading the product security teams with patching and remediation plans, as well as responding to all customer security questionnaires and reviewing security language within contractual agreements.
Key Responsibilities:
  • Help drive adherence to the customer's Product Security’s overarching framework
  • Partner with internal organizations to enhance existing processes and policies
  • Create and present Product Security metrics to management within Ottava and ISRM
  • Champion Product Security strategy and objectives across the Ottava Robotic Platform
  • Engaged as a subject matter expert to support completion of product security activities, tasks, deliverables, documentation, approvals, and product security controls.
  • Responsible for defining security requirements for the product and associated applications
  • Responsible for reviewing the Threat Model and Security Risk Assessment in collaboration with Systems Engineering.
  • Responsible for supporting the FDA pre-market cybersecurity documents (as needed) and collaborating with regulatory compliance stakeholders and activities.
  • Responsible for the facilitation and assessing any third parties’ penetration testing and/or validation services.
  • Perform regular reviews and analysis of security reports and issues, propose solutions where appropriate and lead their remediation.
  • Respond to alerts, security incidents, and assist in remediation as needed.
  • Respond to customer cybersecurity questionnaires for all post-market medical devices.
  • Other MedTech cybersecurity related duties as needed
Qualifications:
Required:
  • At least 5 years IT or cybersecurity experience and at least 2 years of product security experience
  • Bachelor’s degree or equivalent experience
  • Understanding of penetration testing, vulnerability scanning, CVSS and/or other general security testing principles
  • Ability to provide secure coding recommendations
  • Knowledge in at least one coding language (i.e. C/C++, C#, Python) with code review experience highly preferred
  • Ability to work autonomously and proactively seek out security opportunities within the different surgical robotics teams
  • Knowledge of traditional and real-time operating systems (i.e. QNX, Windows Embedded, Ubuntu, Yocto) hardening techniques
  • Ability to translate technical security requirements into solutions
  • Creative problem-solving skills
  • Customer focus (internal & external)
  • Excellent communication and collaboration skills
Preferred Skills:
  • Understanding of Quality Design Control processes and FDA submission processes.
  • Hands-on experience with software security tools and platforms like Checkmarx, Black Duck, Jfrog Xray, etc.
  • Hands-on experience with vulnerability assessment tools.
  • Knowledge of product or medical device security or MDDS platforms.
  • Working knowledge of microservices architecture and API security.
  • Experience working within Agile methodology.
  • Software development experience
  • Experience leading or participating in formal security audits (i.e. HITRUST, SOC2, FedRAMP)
  • Security certification like CISSP/ AWS Security Specialist/ CEH or CSSLP a strong plus.

Salary and Other Compensation:

The annual salary for this position is between $110-134Kdepending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

· Medical/Dental/Vision/Life Insurance

· Paid holidays plus Paid Time Off

· 401(k) plan and contributions

· Long-term/Short-term Disability

· Paid Parental Leave

· Employee Stock Purchase Plan

Disclaimer: The salary, other compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.


De Cognizant Community
We zijn een team dat elkaar helpt om doelen te bereiken op het hoogste niveau. Zonder ons team zouden we niet in staat zijn om de huidige energieke, samenwerkende en inclusieve werkomgeving te behouden. Een omgeving gericht om iedereen te laten slagen. 

  • Cognizant is een globale community van 300.000+ collega’s
  • We dromen niet alleen van een betere wereld, wij helpen het te maken
  • We zorgen voor onze mensen, de klanten, het bedrijf, de community en het klimaat door te doen wat goed is
  • We zetten in op een innovatieve omgeving waar je zelf kan bouwen aan een carriere pad dat bij jou past. 

Over ons
Cognizant (NASDAQ: CTSH) is een bouwer van AI-oplossingen en een leverancier van technologiediensten. Wij slaan de brug tussen AI-investeringen en ondernemingswaarde door het bouwen van full-stack AI-oplossingen voor onze klanten. Onze diepgaande kennis van sectoren, processen en engineering stelt ons in staat om de unieke context van een organisatie te verankeren in technologische systemen. Deze systemen versterken het menselijk potentieel, realiseren tastbaar rendement en geven wereldwijde ondernemingen een voorsprong in een snel veranderende wereld. Ontdek hoe op www.cognizant.com of @cognizant.

Cognizant is een werkgever die gelijke kansen biedt. Uw sollicitatie en kandidatuur worden niet in overweging genomen op basis van ras, huidskleur, geslacht, religie, geloofsovertuiging, seksuele geaardheid, genderidentiteit, nationale afkomst, handicap, genetische informatie, zwangerschap, veteranenstatus of enig ander kenmerk dat beschermd wordt door federale, staats- of lokale wetgeving.

Disclaimer: 
De informatie omtrent compensatie is accuraat ten tijde van deze posting. Cognizant heeft het recht om deze informatie aan te passen. Met lokale wetgeving in achtneming. 

Sluit je aan bij onze Talent Community

Nog niet de juiste kans tegengekomen? Ontvang de nieuwste updates over vacatures, wervingsevenementen en bedrijfsnieuws, speciaal op maat gemaakt voor jou!

Aanmelden