Embedded Product Security Engineer – IoT & Medical Devices

Becton Dickinson; Irvine (CA); On-site; USD 106,000 - 169,000; Full time

Job summary

Becton, Dickinson and Company (BD) in Irvine, CA is seeking a Product Security Engineer (Embedded) to strengthen security for BD's medical devices, including embedded Linux, Windows Embedded/IoT, and RTOS platforms. You will collaborate with R&D and engineering teams to implement security requirements across the product lifecycle.

The role emphasizes threat modeling, vulnerability assessment, cryptography, secure communications, and compliance with regulatory standards for medical devices.

Qualifications

• Undergraduate degree in computer engineering, cybersecurity, computer science, or related technical field.
• Hands-on experience with embedded Linux, Windows Embedded/IoT, or RTOS-based systems, including C/C++ in an embedded security context.
• Minimum 3+ years in product security, product development, software development, or QA.
• Foundational knowledge of information security standards for product development.

Responsibilities

• Security Requirements & Implementation: define and implement security requirements for medical devices and related features.
• Cryptography & PKI: support cryptographic algorithms, key management, and certificate lifecycle management.
• Secure Communications: evaluate TLS/mTLS configurations for device and cloud components.
• Embedded & Firmware Security: hardening of embedded Linux, Windows, and RTOS platforms including secure boot and firmware integrity.
• Cloud & API Security: address security risks in cloud-connected backends and APIs.

Skills

Embedded Linux

C/C++

Security engineering

Threat modeling

Vulnerability assessment

Agile

Technical communication

Education

Undergraduate degree in computer engineering, cybersecurity, computer science, or related technical field

Master’s degree in cybersecurity, computer science, or software engineering

Tools

Black Duck

Coverity

Veracode

Nessus

Snyk

Job description

Becton, Dickinson and Company (BD) in Irvine, CA is seeking a Product Security Engineer (Embedded) to strengthen security for BD's medical devices, including embedded Linux, Windows Embedded/IoT, and RTOS platforms. You will collaborate with R&D and engineering teams to implement security requirements across the product lifecycle.

The role emphasizes threat modeling, vulnerability assessment, cryptography, secure communications, and compliance with regulatory standards for medical devices.