Senior Product Security Engineer (Medical Devices, Hybrid)

Dräger; Andover (MA); Hybrid; USD 115,000 - 127,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with company match

Paid time off and holidays

Job summary

Draeger is seeking a Senior Product Security Engineer in Andover, MA, to work in a hybrid setting. You will collaborate with systems, software, and test engineers to embed security across the product lifecycle and prepare evidence for regulatory submissions.

You will lead threat modeling, risk assessments, and security testing while helping improve postmarket cyber resilience and SBOM management. This is a cross-functional security engineering role, not IT security.

Qualifications

• 3 to 6 years of experience in product security or related fields.
• Experience with threat modeling, risk assessment, secure design, vulnerability analysis, and security testing.
• Ability to communicate technical risks clearly and support cross-functional work.

Responsibilities

• Implement security requirements across the medical device development lifecycle with cross-functional teams.
• Conduct threat modeling, attack-surface analysis, and product cybersecurity risk assessments.
• Define security requirements and risk controls; integrate cyber risks with product safety risk management.
• Support secure device design through secure boot, secure communications, data protection, and update mechanisms.
• Plan and review cybersecurity testing: vulnerability scanning, SCA, fuzzing, pen testing; drive remediation.
• Maintain SBOMs and assess vulnerabilities; prioritize remediation and support disclosure and monitoring.
• Prepare cybersecurity documentation for FDA and regulatory submissions; respond to inquiries.

Skills

Threat modeling

Cybersecurity risk assessment

Secure design

Vulnerability analysis

Security testing

Communication of risks

Education

Bachelor's degree in Computer Science or related field

Tools

SBOM tools

Software composition analysis

Job description

Draeger is seeking a Senior Product Security Engineer in Andover, MA, to work in a hybrid setting. You will collaborate with systems, software, and test engineers to embed security across the product lifecycle and prepare evidence for regulatory submissions.

You will lead threat modeling, risk assessments, and security testing while helping improve postmarket cyber resilience and SBOM management. This is a cross-functional security engineering role, not IT security.