Hybrid Senior Medical Device Security Engineer

Drägerwerk AG & Co. KGaA; Andover (MA); Híbrido; USD 115.000 - 127.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical insurance

Dental insurance

Vision insurance

Disability coverage

401(k) with company match

Paid time off

Descripción de la vacante

Draeger is hiring a Senior Product Security Engineer for a hybrid role at our Andover, MA office, working three days a week. You will secure patient monitoring medical device solutions and connected health software across the lifecycle, collaborating with systems, software, and test teams to embed security into architectures and support regulatory submissions.

The role covers threat modeling, vulnerability management, SBOM maintenance, RMF/NIST mapping, and DoD/ federal authorizations, with

Formación

• 3 to 6 years of experience in product security, application security, embedded security, or security engineering in a product development environment.
• Experience with threat modeling, cybersecurity risk assessment, secure design, vulnerability analysis, and security testing.
• Working knowledge of embedded, Linux, Windows, real-time, or network-connected systems, including common network security principles and protocols.
• Understanding of secure development lifecycle and security-by-design practices.
• Ability to communicate technical risks clearly, develop traceable documentation, and support multiple assignments in a cross-functional environment.

Responsabilidades

• Product Security - Implement security requirements across the medical device development lifecycle by partnering with cross-functional teams and applying best practices from design through deployment.
• Perform threat modeling, attack-surface analysis, and product cybersecurity risk assessments. Define security requirements and risk controls, and integrate cybersecurity risks with product safety risk management.
• Support the design and delivery of secure medical devices through implementation of capabilities such as secure boot, secure communications, data protection, software update mechanisms, system integration protections, and access controls.
• Plan and review cybersecurity testing, including vulnerability scanning, software composition analysis, fuzzing, and penetration testing. Drive remediation and confirm closure through retesting.
• Maintain product SBOMs and assess reported vulnerabilities. Determine product impact, prioritize remediation, and support coordinated vulnerability disclosure and postmarket monitoring.
• Prepare and review cybersecurity documentation for FDA and other regulatory submissions. Respond to regulator and customer cybersecurity questions.
• Support DoD and federal customer Risk Management Framework (RMF) authorizations. Map product controls to NIST SP 800-53, apply and evidence DISA STIG compliance, and prepare authorization artifacts (SSP, SAR, POA&M) supporting customer Authority to Operate (ATO) decisions.
• Serve as a technical subject matter expert. Work with engineering, test, quality, regulatory, service, legal, and program management teams to resolve product security risks.
• Improve product security processes, tools, and reusable engineering practices based on emerging threats, standards, and regulatory expectations.

Conocimientos

Threat modeling

Cybersecurity risk assessment

Secure design

Vulnerability analysis

Security testing

Embedded security

Regulatory submissions

Educación

Bachelor's degree in Computer Science/Cybersecurity/Engineering

Herramientas

SBOM tools

Descripción del empleo

Draeger is hiring a Senior Product Security Engineer for a hybrid role at our Andover, MA office, working three days a week. You will secure patient monitoring medical device solutions and connected health software across the lifecycle, collaborating with systems, software, and test teams to embed security into architectures and support regulatory submissions.

The role covers threat modeling, vulnerability management, SBOM maintenance, RMF/NIST mapping, and DoD/ federal authorizations, with