Senior Product Security Engineer

Trident Consulting; Burlington (MA); On-site; USD 140,000 - 160,000; Full time

Job summary

Trident Consulting is seeking a Sr. Product Security Engineer for a client in Burlington, MA. The role involves leading cybersecurity initiatives across the medical device lifecycle, working closely with cross-functional teams to ensure secure solutions compliant with FDA standards. Applicants should have 7-10 years of experience in cybersecurity, with a focus on regulated industries. This hybrid role offers a salary range of $140K-160K plus benefits.

Qualifications

• 7–10 years of experience in cybersecurity, software engineering, or related fields.
• 3–5 years focused on product or embedded systems security in regulated industries.

Responsibilities

• Design and implement product security architecture and secure development practices.
• Lead threat modeling, vulnerability management, and security risk assessments.
• Drive OS and application hardening for Windows/Linux platforms.
• Collaborate on secure coding, secure boot, and encryption.
• Integrate automated security testing into CI/CD pipelines.
• Maintain cybersecurity documentation for FDA submissions.
• Support incident response and third-party vulnerability monitoring.
• Provide technical leadership across cross-functional teams.

Skills

Secure system design and threat modeling

NIST 800-53

ISO 27001

ISO 14971

IEC 81001-5-1

Secure coding standards (OWASP, CERT C/C++, CWE/SANS Top 25)

Vulnerability management and security testing tools (SAST, DAST, SCA)

CI/CD security and container security

Experience supporting FDA cybersecurity requirements

Education

Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or related field

Job description

Trident Consulting is seeking a Sr. Product Security Engineer for one of our clients in Burlington, MA. A global leader in business and technology services.

Position: Sr. Product Security Engineer

Location: Burlington, MA (Hybrid - 3 days onsite)

Salary range: $140K-160K + Benefits

Job Summary

We are seeking a hands‑on Senior Product Security Engineer to lead cybersecurity initiatives across the medical device product lifecycle. This role will work closely with firmware, software, QA, and regulatory teams to design and implement secure‑by‑design solutions for Windows and Linux‑based medical devices while ensuring compliance with FDA cybersecurity expectations and IEC 81001‑5‑1 standards.

Key Responsibilities

• Design and implement product security architecture and secure development practices.
• Lead threat modeling, vulnerability management, and security risk assessments.
• Drive OS and application hardening for Windows/Linux platforms.
• Collaborate with firmware and software teams on secure coding, secure boot, encryption, and update mechanisms.
• Integrate automated security testing into CI/CD pipelines.
• Maintain cybersecurity documentation for FDA submissions, audits, and compliance activities.
• Support incident response, patch management, and third‑party vulnerability monitoring.
• Provide technical leadership and security guidance across cross‑functional teams.

Required Qualifications

• 7–10 years of experience in cybersecurity, software engineering, or related fields.
• 3–5 years focused on product or embedded systems security in regulated industries (medical devices, aerospace, automotive, or defense).

Strong knowledge of:

• Secure system design and threat modeling
• NIST 800-53, ISO 27001, ISO 14971, IEC 81001-5-1
• Secure coding standards (OWASP, CERT C/C++, CWE/SANS Top 25)
• Vulnerability management and security testing tools (SAST, DAST, SCA)
• CI/CD security, container security, and cloud/Linux environments
• Experience supporting FDA cybersecurity requirements and external security assessments.
• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or related field.

Preferred Qualifications

• Master’s degree in Cybersecurity, Software Engineering, or related discipline.
• Prior experience as a Product Security Lead for medical or industrial products.
• Experience integrating automated security testing into DevOps pipelines.