Medical Device Security Staff Engineer (Remote/Onsite)

Intuitive Surgical; Indianapolis (IN); Presencial; USD 196 000 - 282 000; Tempo integral

Resumo da oferta

Intuitive Surgical is seeking a Staff Security Engineer to architect and document threat models for embedded and cloud products, and to contribute to robust security across all product lines.

In this role you will participate in RED team activities, manage SBOM data for regulatory reports, and perform vulnerability analysis prior to product releases, ensuring compliance with OWASP, NIST, and ISO frameworks.

Qualificações

• BS/BA in cybersecurity, information security, computer science, or relevant field.
• 3–5 years of experience designing secure products.
• Experience with risk assessment and threat/vulnerability analysis.
• Knowledge of CISSP top 10 domains.
• Familiar with FDA Premarket and Postmarket Cybersecurity guidance.
• Travel: 10% or less.
• Job location: Onsite or remote (Pacific Time workday).

Responsabilidades

• Research new security tools & methodology and conduct PoC if necessary.
• Maintains vendor relationship with security tools and services.
• Involves in RED team activities including both in-house and 3rd-party penetration tests.
• Manages SBOM and provides required reports to the FDA and other regional regulations.
• Performs vulnerability analysis on the products before the release to the market.
• Contributes to risk and vulnerability management with the internal CVSS scoring systems.

Conhecimentos

STRIDE threat modeling

Threat modeling

Cybersecurity frameworks

Communication skills

Analytical skills

Decision making

Formação académica

BS/BA in cybersecurity or related field

Ferramentas

C/C++

Python

Descrição da oferta de emprego

Intuitive Surgical is seeking a Staff Security Engineer to architect and document threat models for embedded and cloud products, and to contribute to robust security across all product lines.

In this role you will participate in RED team activities, manage SBOM data for regulatory reports, and perform vulnerability analysis prior to product releases, ensuring compliance with OWASP, NIST, and ISO frameworks.