Senior Product Security Engineer - Secure by Design(Remote)

Hologic, Inc.; Town of Newark (WI); Remote; USD 107,000 - 172,000; Full time

Job summary

Hologic, Inc. is seeking a Senior Product Security Engineer to champion Secure by Design across product teams and drive security design throughout the lifecycle.

You will lead threat modeling efforts, code reviews, and security testing for healthcare solutions, with responsibilities spanning cloud environments and incident response. The role supports remote work options and travel to customer sites as needed.

Qualifications

• Master’s or Bachelor’s degree in Computer Science, MIS, Engineering, or related field.
• 4+ years of experience in computer and network security, cloud base platform experience, and related areas.
• Knowledge of the secure development lifecycle and secure coding standards (OWASP Top 10).
• Experience with security tools: SAST, SCA, DAST and vulnerability scanning.
• Leadership in Threat Modeling (STRIDE preferred).
• Penetration testing experience (direct or supportive).
• Securing development and cloud environments (Azure preferred) and DevSecOps pipelines.
• Strong communication skills, both verbal and written.

Responsibilities

• Champion Security: Drive a Secure by Design culture across product teams and ensure adherence to security standards.
• Policy Enhancement: Improve Secure by Design policies and align products with security standards.
• Documentation and Architecture: Create and maintain security design docs and diagrams.
• Security Assessments: Conduct ongoing security assessments and Threat Modeling for products and remote connectivity solutions.
• Risk Management: Perform Security Risk Management to address vulnerabilities and design issues.
• Design Discussions: Create security controls and requirements, participate in design discussions.
• Development Support: Assist in product development including Security Code Reviews and controls implementation.
• Automation and DevSecOps: Automate security testing, manage security tooling, secure cloud environments.
• Monitoring and Incident Response: Oversee security monitoring and participate in incident response investigations.
• Education and Training: Educate sales and service teams on securing products and environments.

Skills

Secure design

Threat modeling

DevSecOps

Penetration testing

Cloud security

SAST SCA DAST

Azure

Secure SDLC

Security communication

Education

Masters or Bachelor in CS / MIS / Engineering

Tools

SAST

SCA

DAST

Azure

Job description

Hologic, Inc. is seeking a Senior Product Security Engineer to champion Secure by Design across product teams and drive security design throughout the lifecycle.

You will lead threat modeling efforts, code reviews, and security testing for healthcare solutions, with responsibilities spanning cloud environments and incident response. The role supports remote work options and travel to customer sites as needed.