Secure-by-Design Embedded Security Engineer

Pentangle Tech Services | P5 Group; Lake Forest (CA); Ibrido; USD 130.000 - 170.000; Tempo pieno

Descrizione del lavoro

Pentangle Tech Services | P5 Group is seeking an experienced security developer to work with embedded software teams, ensuring security-by-design across electromechanical medical devices. You will define secure implementations, review findings, and guide cryptographic and PKI solutions within real-time environments.

The role emphasizes collaboration with product teams, security architects, and developers, supporting audits and continuous monitoring to uphold compliance and device safety.

Competenze

• Bachelor's degree or equivalent in CS/CE or related field.
• 8+ years in software development or related fields.
• 5+ years in product security design/development for embedded systems.
• 3 years with C/C++, Python, Linux and RTOS security design.

Mansioni

• Define secure implementations aligned with the Application Security Program mandates.
• Implement secure code solutions and guidelines meeting security and privacy requirements.
• Govern security projects with scheduling, planning and prioritization.
• Drive security solutions with development leads, security architects and product owners.
• Review and mitigate SAST/DAST/SCA findings with developers on medical devices.
• Support post-market analysis and continuous security monitoring.
• Collaborate on SOC2 and HiTrust audits for products.

Conoscenze

Security by design

Secure coding

Agile/SAFe

Threat modeling

OWASP Top10

Secure architecture

Formazione

Bachelor's degree in CS/CE

Equivalent experience

Strumenti

C/C++

Python

Linux

RTOS

PKI

Descrizione del lavoro

Pentangle Tech Services | P5 Group is seeking an experienced security developer to work with embedded software teams, ensuring security-by-design across electromechanical medical devices. You will define secure implementations, review findings, and guide cryptographic and PKI solutions within real-time environments.

The role emphasizes collaboration with product teams, security architects, and developers, supporting audits and continuous monitoring to uphold compliance and device safety.