Product Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Clario

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 1973

⚕️ Healthcare Insurance

🧬 Biotechnology

🤖 Artificial Intelligence

💰 Private Equity Round on 2019-10

Healthcare Insurance • Biotechnology • Artificial Intelligence

Clario is a company specializing in accelerating clinical trials from initiation to implementation through advanced technologies and services. Since 2018, Clario has revolutionized endpoint analyses in clinical trials by integrating over 30 artificial intelligence-enabled solutions across more than 600 active trials, enhancing data quality and patient privacy while expediting data collection processes. Clario provides a comprehensive clinical trial management platform, offering solutions such as eCOA, cardiac safety, medical imaging, precision motion, and respiratory services in various therapeutic areas including oncology, cardiology, and neurology. Known for its global reach, Clario supports clinical trials in over 100 countries with a strong focus on decentralized and hybrid trial models. The company's commitment to patient safety and innovation is reflected in their over 26,000 trials and involvement in numerous new drug approvals.

📋 Description

• Establish and maintain governance processes for product security controls, ensuring end-to-end traceability and audit readiness • Define, monitor, and report compliance against Product Security policies, standards, and procedures • Develop and maintain security control repositories, evidence management processes, and audit artifacts • Support internal and external audits, regulatory assessments, and security compliance initiatives • Integrate Product Security Reviews at the earliest stages of product and software development • Partner with Engineering and Product teams to embed Security-by-Design principles throughout the SDLC • Facilitate security requirements definition, architecture reviews, and design assessments • Drive consistent execution of product security checkpoints and governance gates across development programs • Develop automated dashboards, KPIs, and security metrics using tools such as Power BI to provide actionable insights to engineering teams and leadership • Build data pipelines that pull security and product data from tools like GitLab, Jira, and vulnerability management platforms via API, store it in a structured database, and feed executive dashboards • Drive automation initiatives that improve visibility into product security posture and governance effectiveness • Leverage Python, PowerShell, and API integrations to reduce manual governance activities and enable AI-driven security workflows • Automate synchronization of product, application, and security-related data across enterprise systems • Establish and maintain repositories for pre-market and post-market security evidence and documentation • Ensure product security artifacts are complete, current, accessible, and aligned with regulatory requirements • Support vulnerability management, risk assessments, and product security documentation activities • Develop, maintain, and deliver Product Security training programs for engineering, product, and quality teams • Promote secure coding practices, threat-informed development, and a security-first culture • Measure and report training effectiveness and security program adoption

🎯 Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field • 5+ years of experience in Application Security, Product Security, Secure SDLC, DevSecOps, or Cybersecurity Governance • Strong software development background — proficiency in Python and/or PowerShell scripting is required • Hands-on experience developing and consuming REST APIs to integrate security tools and automate data workflows • Experience building dashboards, KPI reports, and security metrics using Power BI, Tableau, Grafana, or similar tools • Experience with data pipeline concepts — pulling from APIs, storing in databases, formatting for reporting (data lake concepts a plus) • Knowledge of security governance frameworks such as NIST SSDF, OWASP SAMM, ISO 27001, or IEC 62443 • Experience automating security workflows using APIs, scripting, or low-code automation platforms • Strong understanding of SSDLC, threat modeling, and security-by-design principles • Excellent communication and stakeholder management skills — this role presents security data to engineering teams and leadership • Experience supporting regulated industries (Healthcare, Medical Devices, Financial Services) is preferred • Security certifications (CISSP, CSSLP, CISM, GSEC, CCSP) are preferred but not required • Exposure to AI/ML in security automation is a strong plus — the team is actively building AI-driven security workflows.

🏖️ Benefits

• Competitive compensation • Provident fund and medical insurance • Engaging employee programs and local events • Modern office spaces and remote work flexibility