Remote Senior Product Cybersecurity Engineer

BD; Ashland (OR); A distancia; USD 118.000 - 189.000; Jornada completa

Descripción de la vacante

BD in the United States is seeking a Senior Product Cyber Security Engineer to own cybersecurity deliverables for a portfolio of software products end to end. You will plan security activities for each release, lead threat modeling, run static analysis, and produce SBOMs and risk reports for regulatory submissions.

This remote role is within the United States with regular overlap to Pacific Time, collaborating daily with R&D, DevOps, Quality and Regulatory teams to scale security across the

Formación

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity or related field.
• 10+ years in software security engineering or cybersecurity for products.
• Fluency with build systems, CI/CD, and scripting basics.
• Experience with threat modeling (STRIDE), CVSS scoring and risk remediation.
• Experience with static analysis and SBOM tooling (CycloneDX/ SPDX).
• Strong written communication suitable for auditors and regulators.

Responsabilidades

• Own cybersecurity deliverables for assigned product releases end to end.
• Lead STRIDE threat modeling sessions and maintain risk registers.
• Perform static and software composition analysis; manage SBOMs.
• Coordinate penetration tests and remediation within deadlines.
• Prepare regulatory submission content and customer assurance packages.
• Automate SBOM generation and reporting to scale across products.

Conocimientos

Threat modeling (STRIDE)

CVSS scoring

Security documentation

Code reading & scripting

Auditor/regulator communication

Automation mindset

Educación

Bachelor's degree in Computer Science, Software Engineering, Cybersecurity or related field

Herramientas

Snyk

CyBeats

Tenable

Qualys

CycloneDX

Descripción del empleo

BD in the United States is seeking a Senior Product Cyber Security Engineer to own cybersecurity deliverables for a portfolio of software products end to end. You will plan security activities for each release, lead threat modeling, run static analysis, and produce SBOMs and risk reports for regulatory submissions.

This remote role is within the United States with regular overlap to Pacific Time, collaborating daily with R&D, DevOps, Quality and Regulatory teams to scale security across the