Remote Senior Product Cyber Security Engineer

Becton, Dickinson and Company; Ashland (OR); Remoto; USD 118.000 - 189.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health insurance

401(k) plan

Paid time off

Descrizione del lavoro

Becton, Dickinson and Company is seeking a Senior Product Cyber Security Engineer to own cybersecurity deliverables for end-to-end product security. You will plan security activities, lead threat modeling, manage SBOMs, coordinate penetration tests, and contribute to regulatory submissions.

You will work with R&D, software engineering, DevOps, quality and regulatory teams, ensuring cybersecurity requirements are met across releases in a remote U.S. role with Pacific overlap.

Competenze

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity or a related technical field, or equivalent practical experience.
• 10+ years of experience in software security engineering.
• Experience with threat modeling (STRIDE) and CVSS scoring.
• Experience producing security deliverables for audits or regulatory submissions.

Mansioni

• Own the cybersecurity deliverables for product releases end to end.
• Lead STRIDE-based threat modeling with product teams.
• Run static code analysis and SBOMs in build pipelines.
• Coordinate penetration tests and customer/regulatory security attestations.
• Prepare cybersecurity content for regulatory submissions (FDA/IVDR).
• Develop automation to generate SBOMs and audit evidence.

Formazione

Bachelor's degree in Computer Science, Software Engineering, Cybersecurity or a related technical field, or equivalent practical experience.

Strumenti

Snyk

CycloneDX

Tenable

Qualys

Descrizione del lavoro

Becton, Dickinson and Company is seeking a Senior Product Cyber Security Engineer to own cybersecurity deliverables for end-to-end product security. You will plan security activities, lead threat modeling, manage SBOMs, coordinate penetration tests, and contribute to regulatory submissions.

You will work with R&D, software engineering, DevOps, quality and regulatory teams, ensuring cybersecurity requirements are met across releases in a remote U.S. role with Pacific overlap.