Technical Product Security Engineer (Medical Devices)

Trident Consulting; Massachusetts; Hybrid; USD 150,000 - 170,000; Full time

Job summary

Trident Consulting is looking for a Technical Product Security Engineer in Burlington, MA. This hybrid role focuses on securing medical devices throughout their lifecycle. The successful candidate will lead security architecture initiatives and partner with engineering teams to ensure security.

Key responsibilities include managing penetration tests, identifying vulnerabilities, and developing security processes. The position offers competitive pay between $150K and $170K.

Qualifications

• Minimum of 5 years experience in a related field.
• Expertise in security architecture and design for embedded systems.
• Proven ability to lead security initiatives.

Responsibilities

• Design and define security architecture for embedded medical devices.
• Manage third-party penetration testing engagements.
• Lead identification and remediation of product vulnerabilities.

Skills

Security Architecture & Design

Penetration Testing

Vulnerability Management

Embedded Systems Security

Education

Bachelor's or Master's degree in Computer Science, Engineering, or related field

Tools

Windows/Linux

Security Testing Tools

Job description

We’re hiring for a “Technical Product Security Engineer (Medical Devices)” role in “Burlington, MA (Hybrid – Onsite M/W/F required)” with one of our industry-leading clients. This is a long-term opportunity, with competitive pay, and the team is actively scheduling interviews.

Role

Technical Product Security Engineer (Medical Devices)

Location

Burlington, MA (Hybrid – Onsite M/W/F required)

Employment Type

Full-Time

Salary Range

$150 - 170K

About the Role

We are seeking a Senior Product Security Engineer to join our team in Burlington, MA. This is a highly technical, hands‑on role focused on securing embedded medical devices across the full product lifecycle. You will play a key role in designing and implementing security architecture, working closely with firmware, software, and systems engineering teams to ensure products are secure by design and aligned with regulatory expectations. This position sits within the broader GRC organization but operates as a deeply technical product security function, bridging engineering, security, and compliance.

Key Responsibilities

Security Architecture & Design

• Design and define security architecture for embedded and connected medical devices
• Lead secure‑by‑design initiatives, including threat modeling and risk mitigation
• Develop and review security solutions for authentication, encryption, secure communications, and data protection
• Partner with engineering teams to embed security into the product lifecycle.

Product & Embedded Security

• Work closely with firmware and software teams to improve security of device components and interfaces
• Support OS and platform hardening (Windows/Linux‑based systems)
• Ensure secure update mechanisms, integrity validation, and secure configurations.

Penetration Testing & Validation

• Manage and coordinate third‑party penetration testing engagements
• Define testing scope, review findings, and drive remediation efforts
• Ensure security validation throughout design, development, and pre‑market stages.

Vulnerability Management

• Lead identification, tracking, and remediation of vulnerabilities across products
• Coordinate cross‑functional response to security issues and disclosures
• Monitor third‑party component risks and dependencies.

Process & SOP Development

• Develop and implement security processes, standards, and SOPs
• Help mature the organization’s product security program
• Ensure alignment with regulatory and internal security expectations.

Required Qualifications