Principal Product Security Engineer

Smith Nephew; Pittsburgh (Allegheny County); Hybrid; USD 126,000 - 198,000; Full time

Benefits offered by this job

401k Matching

Tuition Reimbursement

Flexible Time Off

Paid Holidays

Parental Leave

Job summary

Smith Nephew in Pittsburgh is seeking a seasoned Global Product Security leader to drive cybersecurity across product lifecycles. You will collaborate with Global IT, R&D, and Compliance to protect medical technologies and data.

Responsibilities include risk modeling, security testing, and incident response while guiding cross-functional teams. A senior expert with strong communication helps shape security strategy and regulatory alignment.

Qualifications

• Bachelor's degree in life science, computer science, information systems, or equivalent formal training or professional experience.
• At least five years of hands-on experience in product security, device security, application security, or information technology security.
• Experience with vulnerability management, penetration testing, code security, security governance, risk assessments, network infrastructure, and cloud security.
• Knowledge of medical device regulations and cybersecurity frameworks, including HIPAA, FDA requirements, ISO 27001 and 27002, NIST CSF, and OWASP.
• Ability to design and guide the implementation of innovative security solutions while working independently across multiple teams and business areas.
• Excellent written and verbal communication, prioritization, customer service, and problem resolution skills.
• A current CISM, CISSP, CRISC, or equivalent certification is preferred.

Responsibilities

• Define cybersecurity requirements and controls across technologies, capital devices, digital accessories, connected infrastructure, and software applications.
• Create and maintain product cybersecurity risk registers and threat models, identifying and addressing security risks throughout the development lifecycle.
• Lead security testing and assessment activities, including vulnerability testing, penetration testing, code analysis, software composition analysis, and endpoint protection.
• Recommend technical solutions and support the integration of automated tools and processes that reduce security vulnerabilities.
• Help develop and mature the Global Product Security Strategy and Secure Software Development Life Cycle.
• Support product cybersecurity incident response activities in line with relevant industry practices and standards.
• Provide technical leadership when engaging with regulators, customers, auditors, industry groups, and security researchers.

Skills

Product security

Vulnerability management

Penetration testing

Code security

Security governance

Risk assessments

Network infrastructure

Cloud security

Education

Bachelor's degree

Tools

NIST CSF

ISO 27001/27002

HIPAA

FDA requirements

OWASP

Job description

Life Unlimited. At Smith+NePhew we design and manufacture technology that takes the limits off living.

Join our Global Product Security team in Pittsburgh and help protect medical technologies, connected devices, digital solutions, and the data they rely on. You will provide cybersecurity leadership across the full product lifecycle while partnering with Global IT, Research and Development, and Compliance teams.

**This position does not offer visa sponsorship now or in the future**

What will you be doing?

• Lead the definition and implementation of cybersecurity requirements and controls across technologies, capital devices, digital accessories, connected infrastructure, and software applications
• Create and maintain product cybersecurity risk registers and threat models, identifying and addressing security risks throughout the development lifecycle
• Lead security testing and assessment activities, including vulnerability testing, penetration testing, code analysis, software composition analysis, and endpoint protection
• Recommend technical solutions and support the integration of automated tools and processes that reduce security vulnerabilities
• Help develop and mature the Global Product Security Strategy and Secure Software Development Life Cycle
• Support product cybersecurity incident response activities in line with relevant industry practices and standards
• Provide technical leadership when engaging with regulators, customers, auditors, industry groups, and security researchers

What will you need to be successful?

• A bachelor's degree in life science, computer science, information systems, or equivalent formal training or professional experience
• At least five years of hands on experience in product security, device security, application security, or information technology security
• Experience with vulnerability management, penetration testing, code security, security governance, risk assessments, network infrastructure, and cloud security
• Knowledge of medical device regulations and cybersecurity frameworks, including HIPAA, FDA requirements, ISO 27001 and 27002, NIST CSF, and OWASP
• The ability to design and guide the implementation of innovative security solutions while working independently across multiple teams and business areas
• Excellent written and verbal communication, prioritization, customer service, and problem resolution skills
• A current CISM, CISSP, CRISC, or equivalent certification is preferred You. Unlimited.

We believe in creating the greatest good for society. Our strongest investments are in our people and the patients we serve.

We anticipate the application window for this opening to close on 10.10.2026

Theanticipatedbase compensation range for this position is $125,500.00 - $198,000.00 USD annually and the compensation offered will depend on the candidate's qualifications, job-related knowledge/skills, geographical location. You will be entitled to receive bonus and benefits, which include medical, dental, and vision coverage, 401k, tuition reimbursement, medical leave programs, and a variety of wellness offerings.

Smith & Nephew follows the Pay Transparency and non-discrimination provisions described by local and state policies.

You Unlimited.

We believe in creating the greatest good for society. Our strongest investments are in our people and the patients we serve.

• Inclusion and Belonging- Committed to Welcoming, Celebrating and Thriving on Inclusion and Belonging, Learn more about Employee Inclusion Groups on our website (https://www.smith-nephew.com/).
• Your Future: 401k Matching Program, 401k Plus Program, Discounted Stock Options, Tuition Reimbursement
• Work/Life Balance: Flexible Personal/Vacation Time Off, Paid Holidays, Flex Holidays, Paid Community Service Day
• Your Wellbeing: Medical, Dental, Vision, Health Savings Account (Employer Contribution of $500+ annually), Employee Assistance Program, Parental Leave, Fertility and Adoption Assistance Program
• Training: Hands-On, Team-Customized, Mentorship
• Extra Perks: Discounts on fitness clubs, travel and more!

#LI-HYBRID

#LI-SB2

#LI-DNI

Smith+Neo provides equal employment opportunities to applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability.

Stay connected by joining our Talent Community.

We're more than just a company - we're a community! Follow us on LinkedIn to see how we support and empower our employees and patients every day.

Check us out on Glassdoor for a glimpse behind the scenes and a sneak peek into You Unlimited., life, culture, and benefits at S+N.

Explore our website and learn more about our mission, our team, and the opportunities we offer.