Senior Product Cybersecurity Engineer (Remote)

BD; United States; Remote; USD 118,000 - 189,000; Full time

Job summary

BD, a global medical technology leader, is hiring a Senior Product Cyber Security Engineer to own cybersecurity deliverables for a portfolio of products end to end. You will plan security activities, lead threat modeling, run static analysis, generate SBOMs and coordinate penetration tests, with focus on regulatory submissions and patient safety.

This role is remote within the United States with regular overlap with Pacific time; you will collaborate with R&D, DevOps, Quality and Regulatory

Qualifications

• Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity or a related technical field.
• 10+ years of experience in software engineering, product or application security, or cybersecurity engineering, including hands‑on security work on software products that shipped to customers.
• Basic software engineering fluency: you read and write code in some language, you are comfortable with commandline, you are aware of build systems and package ecosystems (npm, pip, NuGet) and CI/CD pipelines (Azure DevOps or similar).
• Hands‑on experience with threat modeling (STRIDE or similar), vulnerability assessment, CVSS scoring, remediation workflows and risk acceptance.
• Experience with static analysis and software composition analysis tools and with SBOM formats (CycloneDX or SPDX).
• Experience producing formal security deliverables (threat models, risk assessments, vulnerability reports, SBOMs) that have been reviewed in audits or regulatory submissions.
• Strong written communication: clear, structured technical documentation in English suitable for auditors, regulators and customers.
• Demonstrated ability to run several product workstreams in parallel in a procedure-driven, documentation-heavy environment, with a bias toward automation and reuse over manual effort.

Responsibilities

• Own cybersecurity deliverables for assigned products end to end.
• Plan the security activities for each release and lead threat modeling.
• Generate SBOMs and load into post-market monitoring.
• Coordinate penetration tests.
• Prepare cybersecurity content for regulatory submissions.
• Provide guidance across R&D, DevOps, Quality and Regulatory teams.

Skills

STRIDE threat modeling

CVSS scoring

SBOM generation

Static analysis

Code reading

CI/CD pipelines

Threat modeling

Documentation writing

Education

Bachelor’s degree in Computer Science

Tools

Snyk

CycloneDX

SPDX

Job description

BD, a global medical technology leader, is hiring a Senior Product Cyber Security Engineer to own cybersecurity deliverables for a portfolio of products end to end. You will plan security activities, lead threat modeling, run static analysis, generate SBOMs and coordinate penetration tests, with focus on regulatory submissions and patient safety.

This role is remote within the United States with regular overlap with Pacific time; you will collaborate with R&D, DevOps, Quality and Regulatory