Embedded Product Security Engineer (Medical IoT)

bdx; Irvine (CA); On-site; USD 106,000 - 169,000; Full time

Job summary

BD is seeking a Product Security Engineer (Embedded) to strengthen security across BD's medical devices, including embedded Linux and Windows platforms. You will work with R&D to implement security controls, perform threat modeling, vulnerability remediation, and risk assessments in an agile environment.

The role requires hands-on embedded security experience, knowledge of cryptography, PKI, secure communications, and collaboration with software engineers to deliver secure solutions that meet

Qualifications

• Undergraduate degree in computer engineering, cybersecurity, computer science, or related technical field.
• Hands-on experience with embedded Linux, Windows Embedded/IoT, or RTOS-based systems, including familiarity with C/C++ in an embedded security engineering context.
• Minimum of 3+ years in product security, product development, software development, or quality assurance.
• Foundational knowledge of information security standards for product development.
• Based in or in a commutable distance to the Irvine California area

Responsibilities

• Security Requirements & Implementation: Define and implement security requirements and technologies for a product or features per medical device industry standards.
• Cryptography & PKI: Select and implement cryptographic algorithms, key management, and certificate lifecycle management.
• Secure Communications: Evaluate and support TLS/mTLS configurations and secure protocols for device interfaces and networks.
• Embedded & Firmware Security: Harden embedded Linux/Windows/RTOS platforms including secure boot and firmware integrity.
• Cloud & API Security: Identify and address risks in cloud-connected backends and APIs, including authentication and data protection.

Skills

Embedded security

Threat modeling

Vulnerability remediation

Cryptography basics

Secure development

Education

Bachelors in computer engineering / cybersecurity / CS

Tools

Black Duck

Coverity

Veracode

Nessus

Snyk

Metasploit

Job description

BD is seeking a Product Security Engineer (Embedded) to strengthen security across BD's medical devices, including embedded Linux and Windows platforms. You will work with R&D to implement security controls, perform threat modeling, vulnerability remediation, and risk assessments in an agile environment.

The role requires hands-on embedded security experience, knowledge of cryptography, PKI, secure communications, and collaboration with software engineers to deliver secure solutions that meet