Senior Product Security Engineer

🕒 il y a 1 mois

🧀 Wisconsin – Distant

🧀 Wisconsin – Remote

💵 €120 000 - €140 000 / an

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Recevoir des emails pour des emplois à distance

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

HistoSonics, Inc.

Site WebLinkedInTous les Emplois

51 - 200 employés

Fondée en 2009

🧬 Biotechnologie

💊 Pharmaceutique

Healthcare • Biotechnology • Pharmaceuticals

HistoSonics, Inc. est une entreprise de technologie médicale pionnière qui a développé une plateforme de thérapie par faisceau sonore non invasive utilisant un traitement appelé histotripsie. Cette approche innovante exploite les ultrasons focalisés pour détruire mécaniquement les tumeurs hépatiques ciblées à un niveau sous-cellulaire. HistoSonics se consacre à l'avancement de la science de l'histotripsie, visant à offrir des avantages transformateurs aux patients et aux médecins du monde entier, notamment à travers ses essais cliniques en cours et ses programmes éducatifs.

Description

• Execute and document risk assessments of the cybersecurity stature of various subsystems and components within the Edison system • Guide product engineering teams to drive inherent risk remediation via documenting and implementing requirements and adoption of best practices to reduce residual risk and improve the cybersecurity stature of the Edison system • Support FDA premarket submissions by preparing cybersecurity documentation including risk management reports, threat model, MDS2 and cybersecurity whitepaper • Support cyber lifecycle management activities including vulnerability monitoring, assessment, and documentation needs • Maintain a positive, results-oriented work environment, building partnerships and modeling teamwork, communicating to team members in an open, balanced, and objective manner • Create/ maintain a clean, safe, and effective work environment.

🎯 Exigences

• 8 years of combined professional experience in Information Security, Risk Management, and or/IT-centric cybersecurity roles is required • Bachelor’s degree in an engineering, science, or technical discipline preferred • Expertise with cybersecurity vulnerability analysis methodologies including CVSS is required • Expertise with cybersecurity methodologies for identifying design weaknesses is required (threat modeling/STRIDE, CWE) • Familiarity with cybersecurity, information security, and medical device standards regulations is required (HIPAA, FDA, ISO 27001) • Familiarity with methodologies for assessing cybersecurity residual risk is required (CVE analysis, review of technical design documentation, compensating controls analysis, CVSS MD rubric) • Relevant security certifications are preferred. • In-depth, systemic technical knowledge of complex, dynamic, and varying medical device systems. • Excellent written and verbal communication skills, with the ability to participate in engineering discussions. • Strong analytical, critical thinking, and problem-solving skills with an attention to detail.

🏖️ Avantages

• health, dental, and vision insurance • life • short-term and long-term disability insurance • 401(k) • paid time off • comprehensive benefits package for full-time employees