Senior Engineer, Product Cyber Security

Job not on LinkedIn

🔥 0 minutes ago

🌵 Arizona, Colorado, +4 more states – Remote

🌵 Arizona – Remote ⛰️ Colorado – Remote 🥔 Idaho – Remote 🌲 Oregon – Remote ⛷️ Utah – Remote ☕ Washington – Remote

💵 $117.8k - $188.6k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

BD

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1897

🏥 Healthcare

🏭 Manufacturing

⚕️ Healthcare Insurance

💰 $24M Grant on 2020-07

Healthcare • Manufacturing • Healthcare Insurance

BD (Becton, Dickinson and Company) is a global medical technology company dedicated to advancing the world of health. It focuses on developing innovative technologies, services, and solutions to improve safety and efficiency in healthcare. BD offers a wide range of products including medication management solutions, surgical solutions, cervical cancer screening, drug delivery systems, and laboratory services. The company is also involved in infection risk management and provides advanced clinical insights to enhance patient outcomes. With a commitment to global health sustainability and social investing, BD is a leader in healthcare technology and services worldwide.

📋 Description

• Own cybersecurity deliverables for assigned products from planning through release • Create Product Security Management Plans and product cybersecurity plans • Lead STRIDE-based threat modeling and risk assessments • Run static code analysis and software composition analysis; triage and archive findings • Generate, validate and integrate CycloneDX SBOMs into build and release pipelines • Monitor post-market vulnerabilities and drive remediation • Coordinate penetration tests and evaluate mitigations • Maintain patch management plans and security patch verification protocols and reports • Contribute to hardened Windows 11 baseline images and product-level exception management • Assemble customer cyber assurance packages and answer security questionnaires • Prepare cybersecurity content for FDA and EU IVDR regulatory submissions • Review third-party security checklists and SOC 2 reports • Build automation for SBOMs, scan results and audit evidence • Produce portfolio security risk reporting and in-market risk metrics • Act as product security subject matter expert for R&D, DevOps, Quality, Regulatory and partner teams

🎯 Requirements

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity or a related technical field, or equivalent practical experience • 10+ years of experience in software engineering, product or application security, or cybersecurity engineering, including hands-on security work on software products shipped to customers • Basic software engineering fluency, including reading and writing code, command-line use, build systems, package ecosystems, and CI/CD pipelines • Hands-on experience with threat modeling, vulnerability assessment, CVSS scoring, remediation workflows and risk acceptance • Experience with static analysis, software composition analysis tools, and SBOM formats such as CycloneDX or SPDX • Experience producing formal security deliverables reviewed in audits or regulatory submissions • Strong written communication in English suitable for auditors, regulators and customers • Ability to run several product workstreams in parallel in a procedure-driven, documentation-heavy environment • Preferred: experience in medical devices, in vitro diagnostics, life sciences or other regulated software • Preferred: familiarity with FDA premarket cybersecurity guidance, EU MDR/IVDR, ISO 14971, AAMI TIR57, IEC 81001-5-1 or UL 2900 • Preferred: experience with Snyk, CyBeats, Tenable, Qualys, Windows hardening, penetration tests, supplier security assessments, security metrics, AI/LLM tools, FDA inspections, notified-body audits or ISO 13485 audits

🏖️ Benefits

• Comprehensive Total Rewards program • Reward and recognition opportunities • Competitive compensation and benefits programs • Learning, growth and development opportunities • Face-to-face collaboration culture