Principal Engineer, Product Cybersecurity

Jobtailor; Illinois; On-site; USD 120,000 - 165,000; Full time

Job summary

Jobtailor in Illinois is seeking an experienced cybersecurity engineer to own and direct the security design of multiple medical devices. You will apply threat modeling, vulnerability scanning, fuzz testing, and secure code analysis to protect connected systems and meet regulatory requirements.

You will lead projects, provide direction to engineering teams, and translate complex security concepts into clear plans.

Qualifications

• BS or higher in a technical field with 5+ years of industry experience.
• Experience with threat modeling, penetration testing, fuzz testing, vulnerability scanning, secure code analysis.
• Experience with cybersecurity software such as Blackduck, Coverity.
• Familiarity with UL-2900, IC certifications; threat intel, CWE, CVE.

Responsibilities

• Own and direct the cybersecurity design and analysis of multiple medical devices.
• Demonstrate subject matter expert knowledge in state-of-the-art security principles.
• Resolve difficult problems from conception to final design with team input.
• Plan, lead, and deliver project assignments in evaluation, selection and adaptation of various cybersecurity techniques, procedures, and criteria with minimal guidance.
• Contributes to a cybersecurity vision that aligns with the organization's vision and strategic plan.
• Utilizes solid understanding of device and system connectivity concepts in a medical device domain.
• Provides direction to technical team members accountable for implementing cybersecurity, integration, and connectivity deliverables.
• Exhibits creativity and innovation in completing divisional and cross-functional goals.

Skills

Threat Modeling

Penetration Testing

Fuzz Testing

Vulnerability Scanning

Secure Code Analysis

Embedded Systems Security

Organization Skills

Communication Skills

Education

BS in CS/Engineering/Related Field

Masters in Related Field

Tools

Blackduck

Coverity

Job description

• own and direct the cybersecurity design and analysis of multiple medical devices
• Demonstrate subject matter expert knowledge in state-of-the-art security principles
• Resolve difficult problems, from conception to final design with team input
• Plan, lead, and deliver project assignments in the evaluation, selection and adaptation of various cybersecurity engineering techniques, procedures, and criteria with minimal guidance
• Contributes to a cybersecurity vision that aligns with the organization's vision and strategic plan
• Utilizes solid understanding of device and system connectivity concepts in a medical device domain
• Provides direction to technical team members that are accountable for implementing cybersecurity, integration, and connectivity deliverables
• Exhibits creativity and innovation in completing divisional and cross-functional/business unit goals and objectives.

Requirements

• BS in computer science, engineering, mathematics, information management, or related field with 5+ years of industry experience or Masters with 3+ years
• Experience with threat modeling, penetration testing, fuzz testing, vulnerability scanning, secure code analysis
• Experience with cybersecurity related software such as Blackduck, Coverity, etc.
• Experience dealing with threat intelligence, CWEs and CVEs
• Familiarity with cybersecurity related organizations and certifications such as UL (UL-2900), IC...
• Experience with cybersecurity functionality on embedded systems and hosted software applications
• Requires strong organization and communication skills, with the ability to interface with both technical and non-technical personnel
• Ability to convince management on courses of action with minimal assistance using both written and verbal methods.

Core Competencies

Demonstrates expertise in cybersecurity design and analysis for medical devices, with a strong focus on threat modeling, vulnerability scanning, and secure code analysis. Capable of leading projects and providing direction to technical teams while aligning cybersecurity strategies with organizational goals.

Highest-signal resume keywords

• Cybersecurity Design
• Threat Modeling
• Vulnerability Scanning
• Secure Code Analysis
• Embedded Systems Security

ATS Optimization Keywords

Hard Skills

• Threat Modeling
• Penetration Testing
• Fuzz Testing
• Vulnerability Scanning
• Secure Code Analysis

Soft Skills

• Strong Organization Skills
• Communication Skills

Certifications & Qualifications

• UL-2900
• ICS-CERT
• FIPS 140

Industry Keywords

• Cybersecurity Engineering
• Medical Device Security
• Device Connectivity
• Threat Intelligence
• CWE
• CVE

Tools & Technologies

• Blackduck
• Coverity