Product Security Engineer: FDA-Regulated Secure SDLC

Soho Square Solutions; San Diego (CA); On-site; USD 120,000 - 160,000; Full time

Job summary

BD is seeking a Product Security Engineer in San Diego to own and execute the security lifecycle for the MMS Dispensing portfolio, including devices and cloud platforms. You will drive security requirements, threat modeling, risk assessments, and vulnerability management to ensure patient safety and regulatory readiness.

In this role you will collaborate with engineering, quality, regulatory, and product teams to implement secure-by-design controls, lead design reviews, and guide the

Qualifications

• 5+ years cybersecurity experience.
• Experience with FDA Class I/II devices.
• Regulatory/Quality Control product development.
• Demonstrated working experience in embedded, cloud, and application security.
• FDA submissions.

Responsibilities

• Security Architecture & Design across devices, apps, cloud.
• Lead Threat Modeling, Risk Assessments, Requirements/Controls Mapping, Security White Papers.
• Lead and Drive Security Design Reviews & Roadmap Remediations/Mitigations.
• Lean Secure SDLC aligned to NIST, OWASP, BSIMM; SAST, SCA, secrets scanning, container/IaC scanning.
• Support FDA cybersecurity documentation and ensure audit-ready documentation.

Skills

Cybersecurity experience

FDA device cybersecurity

Embedded security

Cloud security

Application security

Risk management

Communication skills

Job description

BD is seeking a Product Security Engineer in San Diego to own and execute the security lifecycle for the MMS Dispensing portfolio, including devices and cloud platforms. You will drive security requirements, threat modeling, risk assessments, and vulnerability management to ensure patient safety and regulatory readiness.

In this role you will collaborate with engineering, quality, regulatory, and product teams to implement secure-by-design controls, lead design reviews, and guide the