Embedded Product Security Engineer - IoT & Medical Devices

BD; Irvine (CA); On-site; USD 106,000 - 169,000; Full time

Job summary

BD is seeking a Product Security Engineer (Embedded) to safeguard BD’s embedded medical devices, including Linux/Windows platforms, across the development lifecycle. You will perform threat modeling, vulnerability remediation, and security risk assessments while collaborating with R&D and software engineers in a fast-paced agile environment.

The team emphasizes compliant security practices, secure design reviews, and documentation, with opportunities to grow within the Product Security Office

Qualifications

• Undergraduate degree in computer engineering, cybersecurity, computer science, or related technical field.
• 3+ years in product security, product development, software development, or quality assurance.
• Based in or commutable distance to the Irvine California area.

Responsibilities

• Support project teams in defining and implementing security requirements and technologies for a product or set of features in accordance with medical device standards.
• Cryptography & PKI: support key management and certificate lifecycle for devices and cloud components.
• Secure communications: assess TLS/mTLS and relevant protocols for devices and cloud services.
• Embedded & firmware security: harden embedded Linux, Windows, and RTOS platforms.
• Cloud & API security: address security risks in backends and APIs.
• Design reviews: participate in code reviews and provide security feedback.
• Security assessments: assist with risk assessments, hazard analysis, and remediation.

Skills

Threat modeling

Vulnerability scanning

Security risk assessments

Embedded Linux

Windows Embedded/IoT

Education

Undergraduate degree in computer engineering, cybersecurity, computer science, or related technical field

Tools

Black Duck

Coverity

Veracode

Nessus

Snyk

Metasploit

Job description

BD is seeking a Product Security Engineer (Embedded) to safeguard BD’s embedded medical devices, including Linux/Windows platforms, across the development lifecycle. You will perform threat modeling, vulnerability remediation, and security risk assessments while collaborating with R&D and software engineers in a fast-paced agile environment.

The team emphasizes compliant security practices, secure design reviews, and documentation, with opportunities to grow within the Product Security Office