Product Security Engineer

Our client's DevSecOps Engineering Center of Excellence (R&D) department is looking for a Security Engineer experienced in medical device or instrumentation security and systems to join our team, pivotal in building and enhancing security in their products and services! As a Product Security Engineer 3, you will be involved in our client's diagnostics products.

RESPONSIBILITIES

• Monitoring the industry for newly identified threats to cybersecurity and assessing the risk to Hologic products.
• Performing and documenting vulnerability assessments to malicious attacks on products and provide support to product teams.
• Assisting with product development efforts dealing with security and network vulnerability issues.
• Developing and executing thorough test procedures to qualify OS patches and anti-virus software; creating and automating test procedures based on lab environment accordingly.
• Educating sales and service force on topics and issues related to network security and virus protection.
• Working with software engineers to develop and implement security requirements.
• Interacting directly and periodically with Engineering and Field Service resources to successfully qualify Hologic networked products to meet customer expectations for equipment performance.
  

The right candidate for us will:

• Possess the discipline required to continually monitor industry security threats, assess risk to Hologic products, and disposition the risk according to established quality procedures.
• Effectively troubleshoot and diagnose issues associated with networked, computer-based products.
• Be available for travel to clients offices, training, and customer sites.
• Work with some supervision but in alignment with strategic intentions and corporate priorities.
• Have good understanding of network design concepts and working knowledge of security analysis and protection tools.

QUALIFICATIONS

Master’s or Bachelor’s degree in Computer Science, Management Information Science, Engineering, or a related technical field with at least 4 – 8 years of relevant experience in the following areas:

Computer and network security; Computer networking administration; Microsoft Windows and Linux operating systems; Software application test and maintenance; Cybersecurity Risk Assessment.

• Experienced in enterprise computer network infrastructure.
• Desirable but not essential:
• Medical information system administration.
• Software verification in a regulated industry.
• PACS, DICOM, ASTM, HL7, EMR, EHR, medical informatics.
• Technical Support to Field Service and/or end-users.
• Certifications in security-related studies are strongly preferred (e.g., CISSP).
• OS (i.e., Windows, Linux) and networking (i.e., Cisco) certifications are preferred.
• Experience in the healthcare industry (provider or medical equipment vendor) is preferred.