Product Security Engineer

Insight Global; North Reading (MA); Hybrid; USD 70,000 - 117,000; Full time

Job summary

Insight Global is seeking a cybersecurity software engineer for a 1 year contract focusing on secure software development, threat modeling, vulnerability assessment, and incident response. The role includes collaborating with product teams and guiding junior engineers in secure coding practices.

The candidate should have 3+ years in cybersecurity or related engineering, experience with CRA, and strong C/C++ or C#.

Qualifications

• BS/BA/MS in Computer Science, Computer Systems Engineering, or equivalent
• 3+ years in cybersecurity or related software engineering field
• Experience with threat modeling, security automation, vulnerability analysis, incident response
• Experience with static code analysis, software composition analysis, SCAP, and penetration testing
• Familiarity with CRA and secure development lifecycle practices
• Languages: C/C++ or C# (or similar)
• Leading engineering projects and mentoring junior engineers

Responsibilities

• Design and implement security controls and tools
• Conduct threat modeling, code reviews, and vulnerability assessments
• Collaborate with product teams for secure development lifecycle and products
• Respond to security incidents and support investigations
• Guide junior engineers and collaborate cross-functionally
• Assist in development and maintenance of cybersecurity training

Job description

1 Year Contract + extensions/potential conversion to perm!

Pay Range: $70-$85/hr

Onsite (5x a week) in North Reading, MA for the first month then Hybrid (2-3x a week onsite) after that

Required Skills & Experience

• 3+ years of experience in cybersecurity or related software engineering field
• Experience with correlating standards to CRA (i.e., IEC 62443, NIST Secure Software Development Framework, NIST 800-53, ISO 27001, ISO 21434, CMMC, RMF)
• Experience in threat modeling, security automation, vulnerability analysis, and incident response
• Experience with static code analysis, software composition analysis, SCAP scans, and penetration testing
• Familiarity with Cybersecurity Resiliency Act (CRA)
• Languages: C/C++ or C# (or other similar compiled and interpreted language experience preferred)
• Experience in taking leadership roles on engineering projects
• Excellent troubleshooting, debugging, and problem-solving skills
• Experience with source control concepts
• BS/BA/MS degree in Computer Science, Computer Systems Engineering, or equivalent experience is required. (BS/BA/MS in Electrical or Computer Engineering may be acceptable with sufficient software experience)

Nice to Have Skills & Experience

• Familiarity with Cybersecurity Resiliency Act (CRA)
• Experience in hardware control, embedded programming, or operating systems preferred

Job Description

Key Responsibilities:

• Design and implement security controls and tools
• Conduct threat modeling, code reviews, and vulnerability assessments
• Collaborate with product teams to ensure secure development lifecycle and products
• Respond to security incidents and support investigations
• Guide junior engineers and collaborate cross-functionally
• Assist in development and maintenance of employee cybersecurity training

Insight Global is looking for a highly motivated, technically driven Cybersecurity Software Engineer to focus on the protection of our internal and customer-facing products and systems. The responsibilities of this role include focus on secure software development, threat modeling, vulnerability assessment, incident response, security tool development, and cross-team collaboration.