Product Security Engineer

HK Recruiting; San Diego (CA); On-site; USD 100,000 - 130,000; Full time

Job summary

HK Recruiting is looking for a Security Engineer to join their DevSecOps Engineering Center of Excellence in San Diego, California. The role involves monitoring cybersecurity threats, performing vulnerability assessments, and supporting product development efforts focused on security. Candidates should have a Master’s or Bachelor’s degree in a related field and 4-8 years of relevant experience, particularly in enterprise network infrastructure and cybersecurity risk assessment. Strong candidates may have certifications like CISSP and experience in the healthcare industry.

Qualifications

• At least 4 – 8 years of relevant experience in computer and network security.
• Experience in enterprise computer network infrastructure.
• Certifications in security-related studies preferred (e.g., CISSP).

Responsibilities

• Monitor industry security threats and assess risk to products.
• Perform and document vulnerability assessments.
• Work with software engineers to implement security requirements.

Skills

Computer and network security

Cybersecurity Risk Assessment

Network design concepts

Troubleshooting networked products

Knowledge of security analysis tools

Education

Master’s or Bachelor’s degree in Computer Science or related field

Tools

Microsoft Windows

Linux operating systems

Networking tools (Cisco)

Job description

Our client's DevSecOps Engineering Center of Excellence (R&D) department is looking for a Security Engineer experienced in medical device or instrumentation security and systems to join our team, pivotal in building and enhancing security in their products and services! As a Product Security Engineer 3, you will be involved in our client's diagnostics products.

RESPONSIBILITIES

• Monitoring the industry for newly identified threats to cybersecurity and assessing the risk to Hologic products.
• Performing and documenting vulnerability assessments to malicious attacks on products and provide support to product teams.
• Assisting with product development efforts dealing with security and network vulnerability issues.
• Developing and executing thorough test procedures to qualify OS patches and anti‑virus software; creating and automating test procedures based on lab environment accordingly.
• Educating sales and service force on topics and issues related to network security and virus protection.
• Working with software engineers to develop and implement security requirements.
• Interacting directly and periodically with Engineering and Field Service resources to successfully qualify Hologic networked products to meet customer expectations for equipment performance.

THE RIGHT CANDIDATE FOR US WILL

• Possess the discipline required to continually monitor industry security threats, assess risk to Hologic products, and disposition the risk according to established quality procedures.
• Effectively troubleshoot and diagnose issues associated with networked, computer-based products.
• Be available for travel to clients offices, training, and customer sites.
• Work with some supervision but in alignment with strategic intentions and corporate priorities.
• Have good understanding of network design concepts and working knowledge of security analysis and protection tools.

QUALIFICATIONS

Master’s or Bachelor’s degree in Computer Science, Management Information Science, Engineering, or a related technical field with at least 4 – 8 years of relevant experience in the following areas:

Computer and network security; Computer networking administration; Microsoft Windows and Linux operating systems; Software application test and maintenance; Cybersecurity Risk Assessment.

• Experienced in enterprise computer network infrastructure.
• Desirable but not essential:
• Medical information system administration.
• Software verification in a regulated industry.
• PACS, DICOM, ASTM, HL7, EMR, EHR, medical informatics.
• Technical Support to Field Service and/or end‑users.
• Certifications in security‑related studies are strongly preferred (e.g., CISSP).
• OS (i.e., Windows, Linux) and networking (i.e., Cisco) certifications are preferred.
• Experience in the healthcare industry (provider or medical equipment vendor) is preferred.