Staff Product Security Engineer

We are seeking a Staff Product Security engineer to join the software team within the

Endoluminal business unit. The successful candidate in this role will serve as the primary security

interface between the Endoluminal business unit and our centralized product security teams. This

role spans embedded security for network-connected medical devices as well as cloud security

for web applications and services. The ideal candidate is a strong individual contributor today with

the potential to help shape our long-term security operating model, including mentoring engineers

Essential Job Duties (Specific responsibilities and tasks an individual would be expected to

perform in the role. Additional job duties may be determined by functional people manager)

 Act as the product security point of contact for the business unit, collaborating with

centralized security, IT, compliance, and engineering teams.

 Drive secure-by-design practices across embedded medical devices and cloud-based

 Provide hands-on technical leadership for security architecture, threat modeling, and risk

 Translate corporate security standards into practical product implementations.

 Maintain a hands-on role in design reviews, code reviews, vulnerability management, pen

 Support regulatory and industry security requirements relevant to medical devices.

 Set best practices for tools and technologies that make our security posture more

Required Skills and Experience (Specific skills, knowledge, and experience that an individual

 Hands-on experience in cybersecurity engineering, with working knowledge of both

 Experience with embedded system or device security, including secure boot, firmware,

 Experience securing cloud-native applications and services, including identity,

 Experience in one or more cyber security frameworks and compliance standards,

 Practical experience with threat modeling, vulnerability assessment, and security

 Ability to work effectively across organizational boundaries and communicate with

 Excellent problem-solving skills and a collaborative mindset.

Required Education and Training (As applicable - Specific education

and training that an individual must possess in order to successfully

perform in job) - Bachelor's or Master's degree in computer science or

related field. - Minimum of 8 years relevant experience in software product security.

Working Conditions (As applicable - Any physical requirements for the job. If not applicable, state

Preferred Skills and Experience (As applicable - Specific skills, knowledge, and experience that

are not required to perform the job, but are desirable to have) - Experience working with medical devices and FDA pre- and post-market cybersecurity

guidance. - Experience with defining and implementing data privacy requirements.

We provide market-competitive compensation packages, inclusive of base pay, incentives, benefits, and equity. It would not be typical for someone to be hired at the top end of range for the role, as actual pay will be determined based on several factors, including experience, skills, and qualifications. The target compensation ranges are listed.

Required Skills and Experience (Specific skills, knowledge, and experience that an individual

 Hands-on experience in cybersecurity engineering, with working knowledge of both

 Experience with embedded system or device security, including secure boot, firmware,

 Experience securing cloud-native applications and services, including identity,

 Experience in one or more cyber security frameworks and compliance standards,

 Practical experience with threat modeling, vulnerability assessment, and security

 Ability to work effectively across organizational boundaries and communicate with

 Excellent problem-solving skills and a collaborative mindset.

and training that an individual must possess in order to successfully

perform in job)

• Bachelor's or Master’s degree in computer science or

related field.

• Minimum of 8 years relevant experience in software product security.

Working Conditions (As applicable

• Any physical requirements for the job. If not applicable, state

Preferred Skills and Experience (As applicable

• Specific skills, knowledge, and experience that

are not required to perform the job, but are desirable to have)

• Experience working with medical devices and FDA pre- and post-market cybersecurity

guidance.

• Experience with defining and implementing data privacy requirements. Primary Function of Position

We are seeking a Staff Product Security engineer to join the software team within the

Endoluminal business unit. The successful candidate in this role will serve as the primary security

interface between the Endoluminal business unit and our centralized product security teams. This

role spans embedded security for network-connected medical devices as well as cloud security

for web applications and services. The ideal candidate is a strong individual contributor today with

the potential to help shape our long-term security operating model, including mentoring engineers

Essential Job Duties (Specific responsibilities and tasks an individual would be expected to

perform in the role. Additional job duties may be determined by functional people manager)

 Act as the product security point of contact for the business unit, collaborating with

centralized security, IT, compliance, and engineering teams.

 Drive secure-by-design practices across embedded medical devices and cloud-based

 Provide hands-on technical leadership for security architecture, threat modeling, and risk

 Translate corporate security standards into practical product implementations.

 Maintain a hands-on role in design reviews, code reviews, vulnerability management, pen

 Support regulatory and industry security requirements relevant to medical devices.

 Set best practices for tools and technologies that make our security posture more