Principal Product Security Engineer

Smith & Nephew; Pittsburgh (Allegheny County); On-site; USD 126,000 - 198,000; Full time

Benefits offered by this job

401k Matching Program

Tuition Reimbursement

Discounted Stock Options

Paid Holidays

Flex Holidays

Paid Community Service Day

Job summary

Smith+ Nephew, a global medical technology leader, invites you to join the Global Product Security team in Pittsburgh to safeguard medical technologies, connected devices, and data across the product lifecycle.

You will lead cybersecurity requirements, build risk registers, and drive secure development practices while engaging with regulators, customers, and partners. A strong background in product security and a relevant degree is expected.

Qualifications

• Bachelor’s degree or equivalent in a relevant field.
• 5+ years hands-on product/security experience.
• Experience with vulnerability management, pen testing, code security, governance, risk assessments, network, and cloud security.

Responsibilities

• Lead the definition and implementation of cybersecurity requirements across technologies, devices, and software.
• Create and maintain product cybersecurity risk registers and threat models across lifecycles.
• Lead security testing including vulnerability testing, pen testing, code analysis, and software composition analysis.
• Recommend technical solutions and automate tools to reduce vulnerabilities.
• Help mature Global Product Security Strategy and Secure SDLC processes.
• Support incident response per industry practices and standards.
• Provide technical leadership with regulators, customers, auditors, and researchers.

Skills

Product security

Device security

Application security

Information security

Education

Bachelor’s degree in life science, computer science, information systems, or equivalent formal training

Tools

Vulnerability management tools

Penetration testing tools

Code analysis tools

Security governance tools

Job description

Life Unlimited. At Smith+ Nephew we design and manufacture technology that takes the limits off living. Join our Global Product Security team in Pittsburgh and help protect medical technologies, connected devices, digital solutions, and the data they rely on. You will provide cybersecurity leadership across the full product lifecycle while partnering with Global IT, Research and Development, and Compliance teams.

This position does not offer visa sponsorship now or in the future.

What will you be doing?

• Lead the definition and implementation of cybersecurity requirements and controls across technologies, capital devices, digital accessories, connected infrastructure, and software applications
• Create and maintain product cybersecurity risk registers and threat models, identifying and addressing security risks throughout the development lifecycle
• Lead security testing and assessment activities, including vulnerability testing, penetration testing, code analysis, software composition analysis, and endpoint protection
• Recommend technical solutions and support the integration of automated tools and processes that reduce security vulnerabilities
• Help develop and mature the Global Product Security Strategy and Secure Software Development Life Cycle
• Support product cybersecurity incident response activities in line with relevant industry practices and standards
• Provide technical leadership when engaging with regulators, customers, auditors, industry groups, and security researchers

What will you need to be successful?

• A bachelor’s degree in life science, computer science, information systems, or equivalent formal training or professional experience
• At least five years of hands on experience in product security, device security, application security, or information technology security
• Experience with vulnerability management, penetration testing, code security, security governance, risk assessments, network infrastructure, and cloud security
• Knowledge of medical device regulations and cybersecurity frameworks, including HIPAA, FDA requirements, ISO 27001 and 27002, NIST CSF, and OWASP
• The ability to design and guide the implementation of innovative security solutions while working independently across multiple teams and business areas
• Excellent written and verbal communication, prioritization, customer service, and problem resolution skills
• A current CISM, CISSP, CRISC, or equivalent certification is preferred

You will be entitled to receive bonus and benefits, which include medical, dental, and vision coverage, 401k, tuition reimbursement, medical leave programs, and a variety of wellness offerings.

Smith+ Nephew follows the Pay Transparency and non-discrimination provisions described by local and state policies.

We anticipate the application window for this opening to close on 10.10.2026.

The anticipated base compensation range for this position is $125,500.00 - $198,000.00 USD annually and the compensation offered will depend on the candidate’s qualifications, job-related knowledge/skills, geographical location.

Your Future:

• 401k Matching Program
• 401k Plus Program
• Discounted Stock Options
• Tuition Reimbursement

Work/Life Balance:

• Flexible Personal/Vacation Time Off
• Paid Holidays
• Flex Holidays
• Paid Community Service Day

Your Wellbeing:

• Medical
• Dental
• Vision
• Health Savings Account (Employer Contribution of $500+ annually)
• Employee Assistance Program
• Parental Leave
• Fertility and Adoption Assistance Program

Training:

• Hands-On
• Team-Customized
• Mentorship

Extra Perks:

• Discounts on fitness clubs, travel and more!

Smith+ Nephew provides equal employment opportunities to applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability.

Learn more about Employee Inclusion Groups on our website (https://www.smith-nephew.com/).

Follow us on LinkedIn to see how we support and empower our employees and patients every day. Check us out on Glassdoor for a glimpse behind the scenes and a sneak peek into You. Unlimited., life, culture, and benefits at S+N. Explore our website and learn more about our mission, our team, and the opportunities we offer.

Smith+ Nephew is a global medical technology company. We design and manufacture technology that takes the limits off living. We support healthcare professionals to return their patients to health and mobility, helping them to perform at their fullest potential. From our first employee and founder, T.J. Smith, to our team today, it’s our people who make Smith+ Nephew a unique place. Yes, we love to innovate and develop exciting technologies, and we offer competitive salaries and progressive benefits. But it’s our culture - of Care, Collaboration and Courage - that really sets us apart. Through a spirit of ownership and can-do attitude we work together to win. We’re a company of people who care about each other, about our customers and their patients, and about our communities. Together, we fulfill our shared purpose of Life Unlimited.