Senior Product Security Engineer

🕒 Abril 15

🧀 Wisconsin – Remoto

🧀 Wisconsin – Remote

💵 $120.000 - $140.000 / ano

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

Candidatar-se

Encontrar Vagas Remotas Similares

Receber Emails de Vagas Remotas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

HistoSonics, Inc.

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 2009

🧬 Biotecnologia

💊 Farmacêutico

Healthcare • Biotechnology • Pharmaceuticals

HistoSonics, Inc. é uma empresa de tecnologia médica pioneira que desenvolveu uma plataforma de terapia por feixe sônico não invasiva, utilizando um tratamento chamado histotripsia. Esta abordagem inovadora utiliza ultrassom focalizado para destruir mecanicamente tumores hepáticos direcionados em nível subcelular. A HistoSonics está dedicada a avançar a ciência da histotripsia, visando oferecer benefícios transformadores para pacientes e médicos em todo o mundo, especialmente por meio de seus ensaios clínicos em andamento e programas educacionais.

Descrição

• Execute and document risk assessments of the cybersecurity stature of various subsystems and components within the Edison system • Guide product engineering teams to drive inherent risk remediation via documenting and implementing requirements and adoption of best practices to reduce residual risk and improve the cybersecurity stature of the Edison system • Support FDA premarket submissions by preparing cybersecurity documentation including risk management reports, threat model, MDS2 and cybersecurity whitepaper • Support cyber lifecycle management activities including vulnerability monitoring, assessment, and documentation needs • Maintain a positive, results-oriented work environment, building partnerships and modeling teamwork, communicating to team members in an open, balanced, and objective manner • Create/ maintain a clean, safe, and effective work environment.

🎯 Requisitos

• 8 years of combined professional experience in Information Security, Risk Management, and or/IT-centric cybersecurity roles is required • Bachelor’s degree in an engineering, science, or technical discipline preferred • Expertise with cybersecurity vulnerability analysis methodologies including CVSS is required • Expertise with cybersecurity methodologies for identifying design weaknesses is required (threat modeling/STRIDE, CWE) • Familiarity with cybersecurity, information security, and medical device standards regulations is required (HIPAA, FDA, ISO 27001) • Familiarity with methodologies for assessing cybersecurity residual risk is required (CVE analysis, review of technical design documentation, compensating controls analysis, CVSS MD rubric) • Relevant security certifications are preferred. • In-depth, systemic technical knowledge of complex, dynamic, and varying medical device systems. • Excellent written and verbal communication skills, with the ability to participate in engineering discussions. • Strong analytical, critical thinking, and problem-solving skills with an attention to detail.

🏖️ Benefícios

• health, dental, and vision insurance • life • short-term and long-term disability insurance • 401(k) • paid time off • comprehensive benefits package for full-time employees