Product Security Engineer/Architect - Bracco Medical Technologies

Bracco; Eden Prairie (MN); Hybrid; USD 113,000 - 124,000; Full time

Benefits offered by this job

PTO & company holidays

Paid family leave

401k plan

Medical, dental, vision & life

Tuition reimbursement

Job summary

Bracco Medical Technologies seeks a Product Security Engineer/Architect to design and implement cutting-edge security solutions for Bracco products. You will work across product development teams to ensure secure and resilient systems and participate in PSIRT activities.

The role supports a flexible location, with options to work from Bracco offices worldwide or remotely, enabling collaboration across global teams and security disciplines.

Qualifications

• Bachelor degree in a related field (CS/Engineering/Software).
• 3 years’ experience in security administration or software engineering.
• 2 years in product security architecture, testing, or vulnerability management.
• Knowledge of OWASP, NIST, SANS, MITRE ATT&CK, UL 2900, etc.
• Experience implementing Secure SDLC practices.
• Strong collaboration and communication skills.

Responsibilities

• Partner with product and software teams for design reviews, threat modelling, testing, and remediation.
• Review system architecture and research additional security capabilities; provide security requirements.
• Support developers and engineers on security practices and mitigations for threats.
• Be part of PSIRT to manage vulnerabilities and incident response on Bracco products.
• Collaborate with R&D Quality, Manufacturing, Regulatory and Service to reduce security risk.
• Develop and deliver security training to internal teams and stakeholders.
• Evaluate new security tools and build internal tooling as needed.

Skills

Threat modelling

Security testing

Vulnerability management

Cross-functional collaboration

Technical writing

Security architecture

Education

Bachelor of Science in CS/Engineering

Job description

Why Join Bracco Medical Technologies?

We care as much about our employees as we do our patients. Our culture fosters a work environment where employees can thrive, be passionate and have fun along the way. Each member of the Bracco Medical Technologies team has the power to make a difference......every day! As a member of BMT’s global R&D organization, the Product Security Engineer/Architect is responsible for creating and implementing cutting-edge security solutions and infrastructures that will ensure Bracco Medical Technologies (BMT) products are secure and resilient. This role provides the opportunity to work cross functionally with a variety of stakeholders to include product development teams and contribute to product security deliverables and activities The location of this position is flexible. You can work from our offices worldwide or remotely.

Primary Duties & Responsibilities

• Partner with the product and software engineering teams to assist with design reviews, threat modelling, penetration testing, code reviews, security issues remediation, and other security related activities.
• Engage with product team to review their system architecture, research on additional security capabilities. provide security requirements and research on additional security capabilities.
• Support software developers, system engineers and hardware/firmware engineers of our business units on their security practices and provide guidance regarding mitigations to emerging threats and remediation planning.
• Be part of PSIRT team to manage vulnerability, CVD and incident response on BMT products.
• Collaborate effectively with cross functional teams including, R&D Quality, Manufacturing, Regulatory and Service to achieve security risk reduction.
• Develop security training and deliver to internal development teams and other stakeholders.
• Evaluation of new security tools and technologies and build internal tools as needed.
• Other duties and responsibilities as required to support the changing security needs of the organization.

Qualifications (Knowledge, Skills & Abilities)

• Minimum Bachelor of Science in Computer Engineering, Computer Science, Software Engineering, Electrical Engineering, Computer Systems Engineering, or a related discipline.
• 3 years’ experience in systems security administration control and/or software engineering experience or other related experience
• 2 years' experience in product security architecture, security testing, security consultancy, vulnerability management or equivalent.
• Have knowledge of industry standards and frameworks such as OWASP, NIST, SANS, MITRE ATT&CK, UL 2900 etc.
• Have experience in implementing effective Secure SDLC frameworks.
• Demonstrated problem-solving ability
• Strong collaboration skills with the ability to work cross functionally.
• Ability to communicate effectively with a variety of stakeholders
• Strong interpersonal and communication skills
• Strong technical writing and presentation skills

Preferred

• Embedded system, firmware and IoT security preferred but not required
• Vulnerability management on products is preferred but not required
• Development experience in C#, C++ or Java preferred but not required
• Offensive Security Certified Professional (OSCP), Offensive Security Certified Expert (OSCE) or Offensive Security Web Expert (OSWE) certification preferred but not required.
• Cloud security experience preferred
• Travel up to 10% domestic and international

Compensation & Total Rewards

Estimated starting salary (replace with hourly range if non-exempt): $113,000.00 - $124,000.00 *Estimated starting salary (replace with hourly range if non-exempt) is intended to reflect the salary Bracco Medical Technologies reasonably expects to pay for the position. The provided range is based on salary and market data and may vary based on an employee's eligibility for geographic differential pay in high-cost-of-labor markets.

• Total Rewards: Paid Time Off, Company Holidays & Paid Family Leave – We provide PTO and Company Holidays to help you recharge, relax and do what’s important to you, when it’s important to you. Our 100% paid family leave options for parents, grandparents and eligible family members provide support for growing families as well.
• Achieve – Beyond competitive compensation, we offer options to help you plan for a financially secure future, including an annual incentive plan and 401k savings plan contributions.
• Live well – We offer comprehensive benefit options to help protect you along the way, including medical, dental, vision, and life insurance, employer HSA contributions, employee assistance program, short-term disability, etc.
• Evolve – Through structured on-the-job learning, workshops, seminars, and our tuition reimbursement program, you’ll find many opportunities to grow, personally and professionally.
• Choose –You won’t find “stuffy” here whether your position requires a hybrid or in-the-office working arrangement. That means business casual for your attire and flexibility in your schedule, wherever possible.

Bracco Medical Technologies is an Aff… Equal Opportunity Employer.

Bracco Medical Technologies desires priority referrals of protected veterans for all openings.

Improve people’s lives by shaping the future of prevention and precision imaging. This is our purpose. Our work impacts millions of people all over the world. Not least the more than 4,000 Bracco colleagues who work to improve lives every single day. That is quite a responsibility and something we proudly embrace. We are the Bracco Group!